Skip to content
Home
Experience

Checkmarx

Software Engineer

2021 — 2024· Braga, Portugal
  • QA
  • Software Engineering
  • Automation
  • Testing
  • SAST
  • Cybersecurity
  • Software lifecycle
  • Security

As a Software Engineer at Checkmarx, I worked within the Quality Assurance division, primarily focused on software development for internal systems, CI/CD infrastructure, and automation platforms. Although part of the QA organization, my role was centered around backend and full-stack development, maintaining and evolving internal systems critical to the stability and performance of our SAST engine ecosystem.

Throughout this period, I maintained and improved multiple internal applications and services built using Python (Flask), Node.js (Express.js), Java (Spring Boot), and C# (WPF and ASP.NET), along with React-based frontends. These services supported validation, orchestration, and analysis processes for the company’s security engine.

I worked extensively with microservices orchestrated through Docker Swarm, refactored legacy codebases to modern standards, and led the effort to containerize multiple applications using Dev Containers. I was also responsible for maintaining and extending Jenkins pipelines while pioneering the adoption of GitHub Actions for new projects, later leading the migration of legacy pipelines to the new CI/CD framework.

One of my key projects was ‘Doppelganger’, an internal management and analytics platform for Checkmarx’s SAST engine CI testing projects. It served as a centralized source of truth for engine results and provided intelligent similarity scoring between projects to measure coverage and reduce redundancy. By identifying overlapping results, the system optimized CI workloads and reduced execution time across thousands of projects.

Another major initiative I led was the ‘Vorpal Regression Management System’, a version control and analytics platform that monitored changes in the Vorpal engine’s codebase and automatically tracked regressions or result deviations across test collections. This system allowed developers to detect breaking changes before merging code, integrating features such as multi-branch support, transaction-safe database operations, caching layers, and real-time analytics dashboards for visibility across the team.

Overall, my work spanned across full-stack development, DevOps, automation, and infrastructure, contributing to the team’s ability to deliver faster, more reliable, and more maintainable internal systems while driving modernization initiatives across the QA organization.

Highlights

  • Ownership and maintenance of a new regression detection engine and platform
  • Design and development of project Doppelganger for result redundancy detection
  • Quality partner ownership of SAST engine teams
  • Software testing using cypress
  • Internal initiatives focal point and ownership

From this role

Related projects

2
Doppelganger — cover

Professional·Checkmarx

2023

Doppelganger

Platform to compare code bases, calculate similarity, and minimize redundancy.

Backend & Systems ArchitectureNode.jsExpress.jsaxiosJavascriptMongoDBElasticSearch+10 more
QA Integration — cover

Professional·Checkmarx

2023

QA Integration

Integration Platform between Jira and Microsoft Devops(TFS) systems for item migration, QA evaluation and work management.

Backend & Systems ArchitectureReactJSXCSSNode.jsJavascriptMongoDB+2 more