Summary
Ahmed Elshaer is a Lead Security Engineer based in Germany with a decade of hands-on experience building detection, response, and monitoring systems from the ground up. He has progressed through incident response and senior engineering roles at Salesforce and Wayfair, where he architected large-scale Linux security monitoring with OSquery, custom extensions, and cloud forensics pipelines. A seasoned incident handler and instructor for SANS courses, he combines practical threat hunting, forensics, and automation skills (Python, PowerShell, OSquery, KAPE/Turbinia) to bridge detection engineering and operational response. Ahmed is known for integrating threat intelligence into automated hunting rules and mapping detections to MITRE ATT&CK, bringing measurable coverage and scalability to security programs. His career shows a pattern of building infrastructure end-to-end—logging, SIEM ingestion, TIP management and detection suites—rather than merely operating tools.
10 years of coding experience
7 years of employment as a software developer
Professional Diploma Cyber Security, Professional Diploma Cyber Security at Information Technology Institute (ITI)
Bachelor's degree Computer Science, Bachelor's degree Computer Science at El Shorouk Academy
Arabic, English, German