Arsalan
Ahmed/ AppSec

I help enterprise engineering teams ship secure code with confidence. I bring software composition analysis into CI/CD and use reachability to separate the vulnerabilities that matter from the noise.

Senior Customer Solutions Engineer · Endor Labs Panama City, Panama
Get in touch View track record
CI/CD Full-Stack Leadership AI Agents SCA Reachability Supply Chain AA

reachability trace · SCA → reachable → supply-chain risk

14+ yrs
building & securing software
10,878,523
U.S. patent · principal dev
6 engineers
team led at CaseFriend
Secured the SDLC at enterprise SaaS·fintech·legal tech·and more
“
No two things have been better combined than knowledge and patience.
Profile

Where engineering meets security.

Portrait of Arsalan Ahmed
PANAMA CITY · PA

Over 14 years I've moved from building large full-stack applications, to architecting them, to leading the teams behind them, and now to securing the software supply chains they depend on.

At Endor Labs I help enterprise engineering teams adopt software composition analysis without drowning in false positives. I use vulnerability reachability to separate the risks that are actually exploitable from the ones that aren't, then turn that into developer-centric remediation that teams act on. The result: security that shifts left instead of slowing delivery down.

Before that, I spent nearly a decade as the technical lead behind a million-dollar legal platform for California law firms. I was the first engineer hired, principal developer on an AI patent, and the architect who grew it from scratch.

I'm Panamanian, orgullosamente panameño. Outside of shipping software, what drives me is teaching and sharing what I learn: I founded a programming school in Panama to help students build practical, job-ready skills.

Track record

Experience

2024–Present
CURRENT

Senior Customer Solutions Engineer

Endor Labs · Application Security & DevSecOps
  • Integrate Software Composition Analysis (SCA) into enterprise CI/CD pipelines across Java, JavaScript, Python, and Go.
  • Secure the SDLC for major enterprise customers across SaaS, fintech, legal tech, and many more.
  • Cut through scanner noise with reachability, dependency-risk, and remediation guidance that developers actually adopt.
  • Help teams shift security left and measurably reduce software supply-chain risk.
SCASASTCI/CDDevSecOpsReachabilityJavaScriptPythonAppSec Claude CodeOpenAI CodexHermes AIOpenclawCursor.aiAI SkillsAI HooksMCP ServersAI Agents Orchestration
2015–2024

Senior Software Developer & Tech Team Lead

CaseFriend · Legal-tech platform, California
  • First engineer hired; grew and led a team of 6 building a million-dollar platform for California law firms.
  • Designed the system architecture and owned code review, product quality, and delivery alongside executive leadership.
  • Principal developer on U.S. Patent 10,878,523, an AI-driven system.
PHPLaravelCodeIgniterVueBackbone.jsPostgreSQLMySQLPythonDockerAzureLinux
2013–2015

Junior Dev → Dev Team Lead

Admios · Software consultancy
  • Joined as a full-stack engineer and was promoted to dev lead within a year.
  • Led junior teams across multiple clients and tech stacks using Agile delivery.
PythonJavaPHPJavaScriptMariaDBAWSLinux
2011–2013

Web Developer & Database Administrator

Center for Ocean-Atmospheric Prediction Studies (FSU)
  • Built PHP and Java websites and managed databases on Linux servers.
  • Created a mobile hurricane-forecasting application and co-authored a published atmospheric-studies paper.
PHPJavaLinuxDatabasesApache
Ventures & products

Things I've worked and contributed.

Through my own studio, Agile Web Tech (founded 2015), I've designed and built products across legal, healthcare, real estate, streaming, and AI, from CaseFriend to the ventures below.

Legal Tech · SaaS

CaseFriend

A comprehensive case-management platform built for California law firms, supporting their work from intake through resolution.

app.casefriend.com ↗ Streaming · LATAM

Cinebunker

A streaming platform built for Latin America, online and growing for more than five years.

cinebunker.com ↗ Real Estate · Website

Pacific Center

A digital destination for Panama's mixed-use center, bringing together dining, offices, entertainment, hospitality, retail, and health.

pacificcenter.com.pa ↗ Property Management · Web App

Condominios City

A secure online portal for condominium access and day-to-day property management.

condominioscity.com ↗ Healthcare

CarePulse

Real-time flow for hospital ERs that coordinates beds, staff, and wait times so teams can see more patients, faster.

carepulse.com ↗ AI · WhatsApp

BotHeroAI

Free AI access for Panama, right inside WhatsApp. Chat and image generation, built to put an AI tutor in everyone's hands.

botheroai.com ↗ Business SaaS

ControlPty

A flexible system for tracking expenses, invoices, and operations, built for small businesses that need to stay organized.

controlpty.com ↗
Teaching & community

I build, and I teach others to build.

I run hands-on workshops for students in Panama on building and publishing real websites with AI, from picking a model to shipping a live site. In this session, the class took a website from idea to live, end to end, using Claude.

Arsalan presenting an AI workshop to a room of students; the slide reads 'Elige la IA que mas te guste' with Claude, Grok, GPT, Llama, Gemini and DeepSeek.
AI WORKSHOP · PANAMA
Arsalan at a podium building a website live, with Claude projected on the screen behind him.
BUILDING LIVE WITH CLAUDE
Capabilities

What I work with.

01 Security & DevSecOps

SCASASTVulnerability ReachabilityDependency RiskSupply-Chain SecurityRemediationShift-LeftCI/CD PipelinesAppSec

02 AI & Automation

Claude CodeOpenAI CodexCursor.aiHermes AIOpenclawMCP ServersAI Agent OrchestrationAI Skills Creation & InstallationAI HooksAnthropic / Claude APIOpenAI APIGemini APILangChainRAGPrompt Engineering

03 Languages & Frameworks

JavaJavaScriptPythonGoPHPLaravelVueReact.jsNode.jsNext.jsHTMLC++

04 Platforms & Tooling

DockerLinuxPostgreSQLMySQLAzureAWSGitGitHub ActionsGitLab CIAzure DevOpsApacheWeb SocketsWindows Server
Weekend builds

Side projects.

Things I build on weekends. Shipping is how I keep learning.

Live · Web App

GitHub Pulse

A dashboard for making sense of GitHub activity and developer signals at a glance.

github-pulse.com ↗ Live · Web App

ComparaPTY

A comparison platform built for Panama that helps people weigh options before they decide.

comparapty.com ↗
Recognition

Selected highlights.

Award · 2025–26

Customer Obsession Award

Recognized for enabling a major enterprise customer at Endor Labs.

Patent

U.S. Patent 10,878,523

Principal developer on an AI-driven system, granted during my tenure at CaseFriend.

Publication · 2014

Open-source Web GIS framework

Author of a paper on an open-source Java web application for building self-contained Web GIS sites.

Founder

Software company in Panama

Founded and ran an independent programming company.

Kudos from the team

Shout-outs from teammates, leadership and customers during my time at Endor Labs.

01 / 00
Slack kudos from Brent: "Kudos to @Arsalan, for providing over-the-top support with [customer]. We met with the executive briefings of two customers during Black Hat, and their leadership praised the work his team is doing with Endor Labs."
AUG 2026 · BLACK HAT · CUSTOMER SUPPORT
Slack kudos from Scott: "Kudos to @Arsalan for his day-to-day excellence in supporting a key enterprise account. Every time we get on a call with their management, they always shout out the great support they get."
JUN 2026 · DAY-TO-DAY EXCELLENCE ON A KEY ACCOUNT
Slack message from Ananth: "Thank you for the work done last night. Because of your efforts, I was able to start my day today without any firefighting."
MAY 2026 · OVERNIGHT WORK, NO MORNING FIREFIGHTING
Slack kudos from Tom in the shai-hulud rapid response channel: "@Arsalan your dedication to our customers is incredible!! Thank you for all that you do."
MAY 2026 · SHAI-HULUD RAPID RESPONSE
Slack kudos from Varun: "Kudos to @Derek Francour and @Arsalan who pulled off an all nighter on Friday night to tackle a new malware incident."
MAR 2026 · ALL-NIGHTER ON A MALWARE INCIDENT
Slack shout-out from Tom quoting an enterprise customer’s AppSec leader: "The team is really appreciative of all the support your team has provided through this integration journey. Being responsive and helping to solve problems — that’s great, thank you for that."
OCT 2025 · ENTERPRISE CUSTOMER EXECUTIVE BRIEFING
Slack shout-out from Nic LaBuz to the team, including @Arsalan, who jumped in to craft the response to the Debug / Chalk supply chain attack.
SEP 2025 · DEBUG / CHALK SUPPLY-CHAIN RESPONSE
Slack kudos from Scott: "Kudos to @Arsalan for proactively offering and running an API best practice session... Thank you for setting them up for success with knowledge to use the platform in the best way possible."
AUG 2025 · API BEST-PRACTICE SESSION
Slack thread where Arsalan passes kudos to a teammate for investigating a customer vulnerability, and the customer replies: "Thank you so so much for investigating this!!!"
JUL 2025 · VULNERABILITY INVESTIGATION FOR A CUSTOMER
Slack kudos from Eli: "Big Kudos to @Arsalan on his tireless pursuit to get one of his customers to activate and operationalize our MDC integration."
JUL 2025 · INTEGRATION ROLLOUT AT A CUSTOMER
Slack thread on the People.ai case study where Jenn adds: "+ Kudos to @Arsalan for helping me quantify the value they’re getting!"
JUL 2025 · PEOPLE.AI CASE STUDY
Slack kudos from Kayjay relaying customer feedback: "working with @Arsalan has been a delight. His quick responses and never say never attitude was their feedback."
JUN 2025 · CUSTOMER FEEDBACK ON RESPONSIVENESS
Slack kudos from Tom: "A big one goes to @Arsalan who has created an internal customer health dashboard, a tremendous first step in how we use product data to influence customer work and urgency."
APR 2025 · CUSTOMER HEALTH STATS · PRODUCT DATA
Slack kudos from Yoly De Sedas: "Kudos to @Arsalan for taking the time to set up an awesome channel to keep the CS team updated with automated daily customer health stats!!"
APR 2025 · AUTOMATED DAILY HEALTH STATS FOR CS
Slack kudos from Scott: "kudos to @Arsalan for running an amazing call with a customer this morning and explaining clearly how we can improve their success rate of scans for .NET with Github App."
MAR 2025 · .NET SCAN SUCCESS PLAN WITH A CUSTOMER
Slack kudos from Tom: "Kudos to the great and powerful @Arsalan - A true customer champion and someone who has been managing a ton of chaos as of late!!"
MAR 2025 · CUSTOMER CHAMPION
Slack kudos from Jenn Gile on the tj-actions response, quoting the customer: "when you pointed out that there were actually 2 specific repos that had this problem, that was really useful."
MAR 2025 · TJ-ACTIONS RESPONSE
Slack shout-out from Pawan thanking the team behind the Scan History feature, including @Arsalan, for providing customer insights.
FEB 2025 · SCAN HISTORY LAUNCH
Slack thread where Arsalan gives kudos to engineers helping debug customer issues, and Scott replies: "I was just about to give you kudos @Arsalan for being so responsive to that customer!"
NOV 2024 · CROSS-TEAM DEBUGGING FOR CUSTOMERS
Slack kudos from jake: "Big Kudos and thank you to @Arsalan stepping up to demo for a customer team this morning in spanish!"
SEP 2024 · CUSTOMER DEMO IN SPANISH
Slack kudos from Tom: "Huge kudos to @Arsalan, who not only helped get a heated customer back on track but has been driving some complex statistical analysis for one of our largest customers."
AUG 2024 · STATISTICAL ANALYSIS FOR A TOP CUSTOMER
Slack message from jake naming @Arsalan among the people "front and center making sure a key account is seeing success as well as the vision for the future!"
AUG 2024 · FRONT AND CENTER ON A KEY ACCOUNT
Slack kudos from Tom: "He has been willing to jump into any situation to help customers while still learning the tricks of the trade! Thank you for all you do."
JUL 2024 · JUMPING IN TO HELP CUSTOMERS

Kudos from Atlassian

Customer feedback recognizing partnership, responsiveness, security expertise and measurable impact.

01 / 00
Atlassian customer kudos recognizing Arsalan's domain expertise, responsiveness, partnership and contribution to customer success.
ATLASSIAN · CUSTOMER RECOGNITION
Atlassian customer feedback describing Arsalan as responsive, knowledgeable and effective at delivering solutions and measurable results.
ATLASSIAN · CUSTOMER FEEDBACK · PART 1
Additional Atlassian customer kudos highlighting Arsalan's collaboration, customer advocacy, technical depth and positive impact.
ATLASSIAN · CUSTOMER FEEDBACK · PART 2
Education
M.S. Computer ScienceFlorida State University · 2013
B.S. Computer ScienceFlorida State University · 2011
Oxford International School2006
Florida State University Master of Science in Computer Science degree certificate awarded to Arsalan Ahmed in 2013
M.S. Computer Science · 2013
Florida State University Bachelor of Science in Computer Science degree certificate awarded to Arsalan Ahmed in 2011
B.S. Computer Science · 2011
Languages EnglishSpanishUrduHindiGujaratiArabic (written)
Off the clock FootballVolleyballChessPing PongFIFACall of Duty
Contact

Let's secure what you're shipping.

Open to conversations about application security, DevSecOps, and AI-driven engineering. The fastest way to reach me is email.

ahmedarsalank@gmail.com LinkedIn ↗
✉ ahmedarsalank@gmail.com ☎ +507 6004 1240 ⌖ Panama City, Panama in LinkedIn