Arsalan
Ahmed/ AppSec

I help enterprise engineering teams ship secure code with confidence. I bring software composition analysis into CI/CD and use reachability to separate the vulnerabilities that matter from the noise.

Senior Customer Solutions Engineer · Endor Labs Panama City, Panama
Get in touch View track record
CI/CD Full-Stack Leadership AI Agents SCA Reachability Supply Chain AA

reachability trace · SCA → reachable → supply-chain risk

14+ yrs
building & securing software
10,878,523
U.S. patent · principal dev
6 engineers
team led at CaseFriend
Secured the SDLC at Atlassian·Affirm·Relativity·and more
“
No two things have been better combined than knowledge and patience.
Profile

Where engineering meets security.

Portrait of Arsalan Ahmed
PANAMA CITY · PA

Over 14 years I've moved from building large full-stack applications, to architecting them, to leading the teams behind them, and now to securing the software supply chains they depend on.

At Endor Labs I help enterprise engineering teams adopt software composition analysis without drowning in false positives. I use vulnerability reachability to separate the risks that are actually exploitable from the ones that aren't, then turn that into developer-centric remediation that teams act on. The result: security that shifts left instead of slowing delivery down.

Before that, I spent nearly a decade as the technical lead behind a million-dollar legal platform for California law firms. I was the first engineer hired, principal developer on an AI patent, and the architect who grew it from scratch.

I'm Panamanian, orgullosamente panameño. Outside of shipping software, what drives me is teaching and sharing what I learn: I founded a programming school in Panama to help students build practical, job-ready skills.

Track record

Experience

2024–Present
CURRENT

Senior Customer Solutions Engineer

Endor Labs · Application Security & DevSecOps
  • Integrate Software Composition Analysis (SCA) into enterprise CI/CD pipelines across Java, JavaScript, Python, and Go.
  • Secure the SDLC for major customers including Atlassian, Affirm, Relativity, and many more.
  • Cut through scanner noise with reachability, dependency-risk, and remediation guidance that developers actually adopt.
  • Help teams shift security left and measurably reduce software supply-chain risk.
SCASASTCI/CDDevSecOpsReachabilityJavaScriptPythonAppSec Claude CodeOpenAI CodexHermes AIOpenclawCursor.aiAI SkillsAI HooksMCP ServersAI Agents Orchestration
2015–2024

Senior Software Developer & Tech Team Lead

CaseFriend · Legal-tech platform, California
  • First engineer hired; grew and led a team of 6 building a million-dollar platform for California law firms.
  • Designed the system architecture and owned code review, product quality, and delivery alongside executive leadership.
  • Principal developer on U.S. Patent 10,878,523, an AI-driven system.
PHPLaravelCodeIgniterVueBackbone.jsPostgreSQLMySQLPythonDockerAzureLinux
2013–2015

Junior Dev → Dev Team Lead

Admios · Software consultancy
  • Joined as a full-stack engineer and was promoted to dev lead within a year.
  • Led junior teams across multiple clients and tech stacks using Agile delivery.
PythonJavaPHPJavaScriptMariaDBAWSLinux
2011–2013

Web Developer & Database Administrator

Center for Ocean-Atmospheric Prediction Studies (FSU)
  • Built PHP and Java websites and managed databases on Linux servers.
  • Created a mobile hurricane-forecasting application and co-authored a published atmospheric-studies paper.
PHPJavaLinuxDatabasesApache
Ventures & products

Things I've worked and contributed.

Through my own studio, Agile Web Tech (founded 2015), I've designed and built products across legal, healthcare, real estate, streaming, and AI, from CaseFriend to the ventures below.

Legal Tech · SaaS

CaseFriend

A comprehensive case-management platform built for California law firms, supporting their work from intake through resolution.

app.casefriend.com ↗ Streaming · LATAM

Cinebunker

A streaming platform built for Latin America, online and growing for more than five years.

cinebunker.com ↗ Real Estate · Website

Pacific Center

A digital destination for Panama's mixed-use center, bringing together dining, offices, entertainment, hospitality, retail, and health.

pacificcenter.com.pa ↗ Property Management · Web App

Condominios City

A secure online portal for condominium access and day-to-day property management.

condominioscity.com ↗ Healthcare

CarePulse

Real-time flow for hospital ERs that coordinates beds, staff, and wait times so teams can see more patients, faster.

carepulse.com ↗ AI · WhatsApp

BotHeroAI

Free AI access for Panama, right inside WhatsApp. Chat and image generation, built to put an AI tutor in everyone's hands.

botheroai.com ↗ Business SaaS

ControlPty

A flexible system for tracking expenses, invoices, and operations, built for small businesses that need to stay organized.

controlpty.com ↗
Teaching & community

I build, and I teach others to build.

I run hands-on workshops for students in Panama on building and publishing real websites with AI, from picking a model to shipping a live site. In this session, the class took a website from idea to live, end to end, using Claude.

Arsalan presenting an AI workshop to a room of students; the slide reads 'Elige la IA que mas te guste' with Claude, Grok, GPT, Llama, Gemini and DeepSeek.
AI WORKSHOP · PANAMA
Arsalan at a podium building a website live, with Claude projected on the screen behind him.
BUILDING LIVE WITH CLAUDE
Capabilities

What I work with.

01 Security & DevSecOps

SCASASTVulnerability ReachabilityDependency RiskSupply-Chain SecurityRemediationShift-LeftCI/CD PipelinesAppSec

02 AI & Automation

Claude CodeOpenAI CodexCursor.aiHermes AIOpenclawMCP ServersAI Agent OrchestrationAI Skills Creation & InstallationAI HooksAnthropic / Claude APIOpenAI APIGemini APILangChainRAGPrompt Engineering

03 Languages & Frameworks

JavaJavaScriptPythonGoPHPLaravelVueReact.jsNode.jsNext.jsHTMLC++

04 Platforms & Tooling

DockerLinuxPostgreSQLMySQLAzureAWSGitGitHub ActionsGitLab CIAzure DevOpsApacheWeb SocketsWindows Server
Weekend builds

Side projects.

Things I build on weekends. Shipping is how I keep learning.

Live · Web App

GitHub Pulse

A dashboard for making sense of GitHub activity and developer signals at a glance.

github-pulse.com ↗ Live · Web App

ComparaPTY

A comparison platform built for Panama that helps people weigh options before they decide.

comparapty.com ↗
Recognition

Selected highlights.

Award · 2025–26

Customer Obsession Award

Recognized for enabling enterprise customer Atlassian at Endor Labs.

Patent

U.S. Patent 10,878,523

Principal developer on an AI-driven system, granted during my tenure at CaseFriend.

Publication · 2014

Open-source Web GIS framework

Author of a paper on an open-source Java web application for building self-contained Web GIS sites.

Founder

Software company in Panama

Founded and ran an independent programming company.

Education
M.S. Computer ScienceFlorida State University · 2013
B.S. Computer ScienceFlorida State University · 2011
Oxford International School2006
Florida State University Master of Science in Computer Science degree certificate awarded to Arsalan Ahmed in 2013
M.S. Computer Science · 2013
Florida State University Bachelor of Science in Computer Science degree certificate awarded to Arsalan Ahmed in 2011
B.S. Computer Science · 2011
Languages EnglishSpanishUrduHindiGujaratiArabic (written)
Off the clock FootballVolleyballChessPing PongFIFACall of Duty
Contact

Let's secure what you're shipping.

Open to conversations about application security, DevSecOps, and AI-driven engineering. The fastest way to reach me is email.

ahmedarsalank@gmail.com LinkedIn ↗
✉ ahmedarsalank@gmail.com ☎ +507 6004 1240 ⌖ Panama City, Panama in LinkedIn