Ruben Groenewoud

Senior Security Research Engineer at Elastic

Limburg, Netherlands
email-iconphone-icongithub-logolinkedin-logotwitter-logostackoverflow-logofacebook-logo
Join Prog.AI to see contacts
email-iconphone-icongithub-logolinkedin-logotwitter-logostackoverflow-logofacebook-logo
Join Prog.AI to see contacts

Summary

🤩
Rockstar
🎓
Top School
Ruben Groenewoud is a Senior Security Research Engineer at Elastic with four years of hands-on experience in Linux behavior analysis, ML-driven detection engineering, malware reverse engineering, and signature development. He brings practical red-team and SOC experience from roles including Reservist Cyber Officer and penetration tester, giving him a pragmatic attack-to-detection perspective. Ruben’s background spans cloud and network engineering through internships and early-career roles, enabling him to connect low-level system behavior with enterprise detection needs. Based in Limburg, Netherlands, he combines a Master’s in Information Management and Business Intelligence with a curiosity for translating research into production-ready detection rules and models. Notably, he advances Linux-focused detection techniques at Elastic while maintaining an active GitHub presence under Aegrah, signaling ongoing experimentation and tooling work beyond his day job.
code4 years of coding experience
job6 years of employment as a software developer
bookMaster's degree Information Management and Business Intelligence, Master's degree Information Management and Business Intelligence at Maastricht University School of Business and Economics
bookBachelor's degree Network Engineering, Bachelor's degree Network Engineering at Zuyd University of Applied Sciences
languagesEnglish, Dutch
github-logo-circle

Github Skills (28)

threat-hunting10
integrations10
security10
persistence10
reverse-shell10
endpoint10
elastic10
sarif9
security-hardening9
linux9
bash9
blueteam9
bypass9
elasticsearch9
logging8

Programming languages (7)

JavaShellHandlebarsGoHTMLYARAPython

Github contributions (5)

github-logo-circle
Aegrah/PANIX

Jul 2024 - Mar 2025

Customizable Linux Persistence Tool for Security Research and Detection Engineering.
Contributions:4 releases, 27 PRs, 51 pushes in 7 months
backdoorbashlinuxpersistencesecurity
Aegrah/webscraper

Jan 2022 - Jan 2025

Contributions:14 pushes in 3 years
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.
Request Free Trial
Ruben Groenewoud - Senior Security Research Engineer at Elastic