Resume
João Guedes
Backend Software Engineer
Braga, Portugal
Systems-minded Backend Engineer with a foundational background in cybersecurity, specializing in designing resilient, high-availability product infrastructure. Passionate about both building scalable systems and understanding how to securely break them. i combine deep hands-on experience in Linux system administration and infrastructure design with a product-focused approach to delivering clean, reliable solutions and code.
Experience
Backend Software Engineer · Uphold
2026 — PresentBraga, Portugal
I work in the Backend Development team responsible for Manager Tool at Uphold, where I design and develop on a vital tool for account agents to monitor and manage client accounts
- Ship code and iterate Manager Tool
- Actively contribute to Uphold's complex Backend and tech stack
- Help modernize the Backend's tech stack and services' code bases
Application Security Engineer · Checkmarx
2024 — 2026Braga, Portugal
I joined the AppSec department where I was responsible for conducting assessments and analysis on vairous engines and perform research work on new queries and vulnerability detection methods. I also pioneered and led the internal tools and platforms effort in this department thanks to my experience in software development and systme design
- Performed a lot of security analysis work on static code and engine results
- Research on new vulnerabilities for new queries and detection methods
- Started development on intneral tools and software for the AppSec department
Software Engineer · Checkmarx
2021 — 2024Braga, Portugal
I worked as a full time software engineer in the Quality Assurance department focused on internal initiatives and also as a quality assurance partner and automation engineer
- Ownership and maintenance of a new regression detection engine and platform
- Design and development of project Doppelganger for result redundancy detection
- Quality partner ownership of SAST engine teams
Quality Assurance Intern · Checkmarx
2021 — 2021Braga, Portugal
During my summer internship at Checkmarx, I joined the QA development team where I worked on internal tools supporting the continuous integration and testing pipelines to support product teams.
- Monitoring and maintaining automation pipelines
- Quality partner of SAST engine teams reviewing work items and their regressions
- Maintain and iterate leagacy regression detection software
Featured projects
Internal tool for comparison and management of different engines' results across multiple companies
Interoperability system that turns HL7 & FHIR healthcare data into ML-ready inputs for Adaptive Business Intelligence models.
Platform to compare code bases, calculate similarity, and minimize redundancy.
Integration Platform between Jira and Microsoft Devops(TFS) systems for item migration, QA evaluation and work management.
Progressive Web Application (PWA) that automates and integrates 3 different platforms into one via ERPs/CRMs, Web Services and Web APIs
BracelHertZ is an management Progressive Web Application designed to help lower prison suicide rates letting them monitor the inmates' heart rate.
Progressive Web Application that allows people to schedule and reserve football games in fields all across Portugal.
Skills
Languages
- Node.js
- TypeScript
- JavaScript
- Python
- Go
- Java
- Kotlin
- C#
- C++
- Rust
- Groovy
- Perl
- Prolog
- R
- SQL
- Bash
- PowerShell
Backend & APIs
- Express
- Gin
- Flask
- Django
- Spring Boot
- ASP.NET
- REST
- gRPC
- GraphQL
- WebSockets
Frontend
- React
- Redux
- Zustand
- Vue
- Astro
- HTML
- CSS
- Vite
- Webpack
- Rollup
Architecture & Systems
- Microservices
- Distributed systems
- Event-driven
- System design
- Caching
- RabbitMQ
- CI/CD
Databases
- PostgreSQL
- MySQL
- MongoDB
- DynamoDB
- Redis
- SQLite
- Elasticsearch
DevOps & Cloud
- Docker
- Docker Compose
- Portainer
- Kubernetes
- Argo CD
- Jenkins
- GitHub Actions
- Azure DevOps
- Jira
- AWS
- Nginx
- Traefik
- Proxmox
- Linux
- Git
Security & Offensive
- Pentesting
- AppSec
- SAST
- DAST
- SCA
- OWASP Top 10
- Secure coding
- Burp Suite
- OWASP ZAP
- Nmap
- Metasploit
Networking
- TCP/IP
- DNS
- VPNs
- Tailscale
- OpenVPN
- Reverse proxies
- Load balancing
- Firewalls
- SSH
Data Science & BI
- Pandas
- NumPy
- scikit-learn
- Jupyter
- Matplotlib
- Power BI
- Tableau
- Excel automation
- Talend Open Studio
Testing & QA
- Cypress
- Selenium
- Unit testing
- Integration testing
- E2E testing
- Test automation
Soft skills
- Ownership
- Clear communication
- Pragmatism
- Mentoring
- Self-sufficient
- Fast-learner
Languages
- Portuguese · Native
- English · Fluent
Education
Master's degree in Engineering and Management of Information Systems
2021 — 2024University of Minho | School of Engineering · Azurém, Guimarães, Portugal
Advanced specialization in software and system architecture and development, machine learning engineering, and enterprise IT strategy. Developed high-level skills in designing intelligent systems, training predictive data models, and deploying robust digital infrastructures to solve complex business problems. Designed and implemented an advanced interoperability system for integrating ABI systems in healthcare environments with real world application.
Bachelor's degree in Engineering and Management of Information Systems
2018 — 2021University of Minho | School of Engineering · Azurém, Guimarães, Portugal
Focused on building a strong foundation in software engineering, database management, and business processes. Developed core competencies in application development, data modeling, and analyzing organizational workflows to align technology with business goals.
- Junior Penetration Tester (eJPTv2) · INE2025
- DevOps Engineering on AWS · AWS2023