Looking for a job

Jeel Khatiwala

@jeelkhatiwala

DFIR Analyst at Cyber Diligence Inc. who built a commercial threat-hunting platform and cut manual triage overhead by 30%.

United States

Message

At Cyber Diligence Inc., I investigate ransomware, business email compromise, insider threat, and cloud incidents across Windows, mobile, Microsoft 365, and Azure environments. I built the firm’s commercial proactive threat-hunting platform as its sole developer, and created Python forensic automation that reduced manual triage overhead by 30 percent.

I also recover evidence from BitLocker-encrypted endpoints and identified a previously undocumented ransomware family. At the University of Baltimore, I was first author of peer-reviewed DFIR papers, including IEEE COMPSAC 2025 and 2026.

Experience

Work history, roles, and key accomplishments

Current

Digital Forensics and Incident Response (DFIR) Analyst

Current

Cyber Diligence Inc.

Jul 2025 - Present (1 year 3 months)

Conducts full-lifecycle incident response and digital forensic investigations for enterprise clients across Windows, mobile, Microsoft 365, and Azure environments. Responds to ransomware, BEC, insider threat, and IP theft incidents, and designed a Python-based forensic automation framework reducing manual triage overhead by 30 percent.

Research Associate

University of Baltimore

Apr 2024 - Aug 2025 (1 year 4 months)

First author of peer-reviewed publications on digital forensics and large language models, and on structural inference for undocumented mobile databases. Designed schema-agnostic structural inference algorithms and conducted cross-platform forensic investigations.

Digital Forensics Research Large Language Models Mobile Forensics Structural Inference Windows MacOS Android iOS

Junior Network Engineer and Technical Support

University of Baltimore

Mar 2024 - Aug 2024 (5 months)

Supported end-to-end incident response for phishing, insider threat, and privilege escalation cases, including log collection and evidence preservation. Performed forensic triage of malware alerts using ELK Stack, CrowdStrike Falcon, and Sysmon, and maintained 99 percent uptime across 20+ university labs.

Incident Response ELK Stack CrowdStrike Falcon Cloud Security Sysmon NetFlow Suricata PCAP Firewalls Hardening De Endpoints SOP Development

Red Team Assessment Intern

Cyber SapiensUnited LLP

Jan 2023 - Jul 2023 (6 months)

Conducted penetration testing across 10+ enterprise web applications, exploiting 35+ OWASP Top 10 vulnerabilities. Reverse engineered malware samples to extract payload behavior and C2 infrastructure, and collaborated with SOC to tune detection rules.

Penetration Testing OWASP Top 10 Malware Analysis Reverse Engineering Command And Control (C2)CVSS SOC Detection Rule Development

Education

Degrees, certifications, and relevant coursework

University of Baltimore

Master of Science, Cyber Forensics and Counterterrorism

2024 - 2025

Grade: 4.0

Activities and societies: Vice President, Criminal Justice and Forensic Studies Society

Pursued a Master of Science in Cyber Forensics and Counterterrorism with a 4.0 GPA, receiving the Berry Grant Award and Laurence Short Academic Award.