Ruben Groenewoud

Senior Security Research Engineer at Elastic

Limburg, Netherlands
email-iconphone-icongithub-logolinkedin-logotwitter-logostackoverflow-logofacebook-logo
Join Prog.AI to see contacts
email-iconphone-icongithub-logolinkedin-logotwitter-logostackoverflow-logofacebook-logo
Join Prog.AI to see contacts

Summary

🤩
Rockstar
🎓
Top School
Ruben Groenewoud is a Senior Security Research Engineer at Elastic with four years of hands-on experience in Linux behavior analysis, ML-driven detection engineering, malware reverse engineering, and signature development. He brings practical red-team and SOC experience from roles including Reservist Cyber Officer and penetration tester, giving him a pragmatic attack-to-detection perspective. Ruben’s background spans cloud and network engineering through internships and early-career roles, enabling him to connect low-level system behavior with enterprise detection needs. Based in Limburg, Netherlands, he combines a Master’s in Information Management and Business Intelligence with a curiosity for translating research into production-ready detection rules and models. Notably, he advances Linux-focused detection techniques at Elastic while maintaining an active GitHub presence under Aegrah, signaling ongoing experimentation and tooling work beyond his day job.
code5 years of coding experience
job6 years of employment as a software developer
bookMaster's degree Information Management and Business Intelligence, Master's degree Information Management and Business Intelligence at Maastricht University School of Business and Economics
bookBachelor's degree Network Engineering, Bachelor's degree Network Engineering at Zuyd University of Applied Sciences
languagesEnglish, Dutch
github-logo-circle

Github Skills (24)

threat-hunting10
linux10
bash10
security10
persistence10
elastic10
unix9
integrations9
binaries9
blueteam9
reverse-shell9
bypass9
elasticsearch9
java7
logging7

Programming languages (8)

JavaJinjaShellHandlebarsGoYARAYAMLPython

Github contributions (5)

github-logo-circle
Aegrah/PANIX

Jul 2024 - Feb 2026

Customizable Linux Persistence Tool for Security Research and Detection Engineering.
Contributions:4 releases, 27 PRs, 51 pushes in 1 year 7 months
linuxsecuritybashpersistencebackdoor
Aegrah/webscraper

Jan 2022 - Jan 2025

Contributions:14 pushes in 3 years
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.
Request Free Trial