Ruben Groenewoud is a Senior Security Research Engineer at Elastic Security (Threat Research and Detection Engineering), specializing in Linux threat detection, SIEM, malware analysis, and ML-based rule development. With a background in SOC operations, penetration testing, and machine learning for cybersecurity, he has published research across malware analysis, detection engineering, and Linux security. He is also the creator of PANIX, a framework dedicated to simulating and understanding Linux persistence techniques.