Skip to content
Home

Resume

João Guedes

Backend Software Engineer

Braga, Portugal

Systems-minded Backend Engineer with a foundational background in cybersecurity, specializing in designing resilient, high-availability product infrastructure. Passionate about both building scalable systems and understanding how to securely break them. i combine deep hands-on experience in Linux system administration and infrastructure design with a product-focused approach to delivering clean, reliable solutions and code.

Experience

Backend Software Engineer · Uphold

2026 — Present

Braga, Portugal

I work in the Backend Development team responsible for Manager Tool at Uphold, where I design and develop on a vital tool for account agents to monitor and manage client accounts

  • Ship code and iterate Manager Tool
  • Actively contribute to Uphold's complex Backend and tech stack
  • Help modernize the Backend's tech stack and services' code bases

Application Security Engineer · Checkmarx

2024 — 2026

Braga, Portugal

I joined the AppSec department where I was responsible for conducting assessments and analysis on vairous engines and perform research work on new queries and vulnerability detection methods. I also pioneered and led the internal tools and platforms effort in this department thanks to my experience in software development and systme design

  • Performed a lot of security analysis work on static code and engine results
  • Research on new vulnerabilities for new queries and detection methods
  • Started development on intneral tools and software for the AppSec department

Software Engineer · Checkmarx

2021 — 2024

Braga, Portugal

I worked as a full time software engineer in the Quality Assurance department focused on internal initiatives and also as a quality assurance partner and automation engineer

  • Ownership and maintenance of a new regression detection engine and platform
  • Design and development of project Doppelganger for result redundancy detection
  • Quality partner ownership of SAST engine teams

Quality Assurance Intern · Checkmarx

2021 — 2021

Braga, Portugal

During my summer internship at Checkmarx, I joined the QA development team where I worked on internal tools supporting the continuous integration and testing pipelines to support product teams.

  • Monitoring and maintaining automation pipelines
  • Quality partner of SAST engine teams reviewing work items and their regressions
  • Maintain and iterate leagacy regression detection software

Featured projects

  • C-LAB · Checkmarx

    2025

    Internal tool for comparison and management of different engines' results across multiple companies

  • Interoperability system that turns HL7 & FHIR healthcare data into ML-ready inputs for Adaptive Business Intelligence models.

  • Doppelganger · Checkmarx

    2023

    Platform to compare code bases, calculate similarity, and minimize redundancy.

  • QA Integration · Checkmarx

    2023

    Integration Platform between Jira and Microsoft Devops(TFS) systems for item migration, QA evaluation and work management.

  • SP Mobile · University of Minho

    2021

    Progressive Web Application (PWA) that automates and integrates 3 different platforms into one via ERPs/CRMs, Web Services and Web APIs

  • BracelHertZ · University of Minho

    2020

    BracelHertZ is an management Progressive Web Application designed to help lower prison suicide rates letting them monitor the inmates' heart rate.

  • Press&Play · University of Minho

    2019

    Progressive Web Application that allows people to schedule and reserve football games in fields all across Portugal.

Skills

Languages

  • Node.js
  • TypeScript
  • JavaScript
  • Python
  • Go
  • Java
  • Kotlin
  • C#
  • C++
  • Rust
  • Groovy
  • Perl
  • Prolog
  • R
  • SQL
  • Bash
  • PowerShell

Backend & APIs

  • Express
  • Gin
  • Flask
  • Django
  • Spring Boot
  • ASP.NET
  • REST
  • gRPC
  • GraphQL
  • WebSockets

Frontend

  • React
  • Redux
  • Zustand
  • Vue
  • Astro
  • HTML
  • CSS
  • Vite
  • Webpack
  • Rollup

Architecture & Systems

  • Microservices
  • Distributed systems
  • Event-driven
  • System design
  • Caching
  • RabbitMQ
  • CI/CD

Databases

  • PostgreSQL
  • MySQL
  • MongoDB
  • DynamoDB
  • Redis
  • SQLite
  • Elasticsearch

DevOps & Cloud

  • Docker
  • Docker Compose
  • Portainer
  • Kubernetes
  • Argo CD
  • Jenkins
  • GitHub Actions
  • Azure DevOps
  • Jira
  • AWS
  • Nginx
  • Traefik
  • Proxmox
  • Linux
  • Git

Security & Offensive

  • Pentesting
  • AppSec
  • SAST
  • DAST
  • SCA
  • OWASP Top 10
  • Secure coding
  • Burp Suite
  • OWASP ZAP
  • Nmap
  • Metasploit

Networking

  • TCP/IP
  • DNS
  • VPNs
  • Tailscale
  • OpenVPN
  • Reverse proxies
  • Load balancing
  • Firewalls
  • SSH

Data Science & BI

  • Pandas
  • NumPy
  • scikit-learn
  • Jupyter
  • Matplotlib
  • Power BI
  • Tableau
  • Excel automation
  • Talend Open Studio

Testing & QA

  • Cypress
  • Selenium
  • Unit testing
  • Integration testing
  • E2E testing
  • Test automation

Game Engines

  • Unity
  • Godot

Hardware & Embedded

  • Arduino
  • Raspberry Pi
  • ESP32

Soft skills

  • Ownership
  • Clear communication
  • Pragmatism
  • Mentoring
  • Self-sufficient
  • Fast-learner

Languages

  • Portuguese · Native
  • English · Fluent

Education

Master's degree in Engineering and Management of Information Systems

2021 — 2024

University of Minho | School of Engineering · Azurém, Guimarães, Portugal

Advanced specialization in software and system architecture and development, machine learning engineering, and enterprise IT strategy. Developed high-level skills in designing intelligent systems, training predictive data models, and deploying robust digital infrastructures to solve complex business problems. Designed and implemented an advanced interoperability system for integrating ABI systems in healthcare environments with real world application.

Bachelor's degree in Engineering and Management of Information Systems

2018 — 2021

University of Minho | School of Engineering · Azurém, Guimarães, Portugal

Focused on building a strong foundation in software engineering, database management, and business processes. Developed core competencies in application development, data modeling, and analyzing organizational workflows to align technology with business goals.

  • Junior Penetration Tester (eJPTv2) · INE2025
  • DevOps Engineering on AWS · AWS2023