Andrea Guarino
Senior Staff Software Engineer at Sonar
Geneva, Geneva, Switzerland
Summary
👤
Senior🎓
Top SchoolAndrea Guarino is a Senior Staff Software Engineer with 11 years of experience building production-grade program analysis and language tooling, currently leading core analysis infrastructure at Sonar in Geneva. He specializes in semantic analysis, type inference, symbolic execution and dataflow reasoning across dynamic and static languages, with a track record of redesigning and shipping the SonarPython analyzer and advancing Java and Python bug-detection engines. Andrea balances precision and scalability, applies rigorous benchmarking to trade off detection rate versus false positives, and mentors teams through complex rewrites. An active contributor to prominent open-source analyzers like SonarJava and SonarJS, he has improved security checks and migrated JavaScript rules to ESLint-based implementations—demonstrating both deep compiler-level expertise and practical security-minded engineering.
11 years of coding experience
4 years of employment as a software developer
Master of Science (M.S.) - Double degree Software Engineering, Master of Science (M.S.) - Double degree Software Engineering at Télécom ParisMaster of Science (M.S.) Computer Software Engineering, Master of Science (M.S.) Computer Software Engineering at Politecnico di Torino
French, English, Italian
Stackoverflow
1reputation
0reached
0answers
0questions
Github Skills (17)
javascript10
static-analysis10
sonarqube10
analyzer10
it-security10
typescript10
eslint10
software-quality10
sonarlint10
java10
security10
javas10
typescript-types10
typescripts10
database-security9
Programming languages (9)
Github contributions (5)
SonarSource/SonarJS
Oct 2018 - Apr 2021
SonarSource Static Analyzer for JavaScript and TypeScript
Role in this project:
Full-stack Developer
Full-stack DeveloperContributions:21 commits in 2 years 6 months
Contributions summary:Andrea primarily focused on migrating existing JavaScript code to utilize ESLint for static analysis. They refactored several checks, such as those related to boolean expressions, conditional statements, and switch cases, to leverage ESLint-based implementations. Additionally, the user removed an outdated sensor for SonarLint and fixed the LCOV parser to resolve absolute paths, enhancing code quality analysis and reporting. This involved modifying existing Java code and configuration to accommodate the changes.
static-analyzerlintersonarcloudlanguage-teamjavascript
SonarSource/sonar-java
Aug 2018 - May 2019
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
Role in this project:Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:6 commits in 9 months
Contributions summary:Andrea contributed to security-focused code improvements and refactoring within the SonarSource Java static analyzer project. Their work involved refactoring code to use utility classes, addressing false positives, and adding support for specific database connection URLs. Furthermore, they implemented and refined checks related to security vulnerabilities such as cookie security, database password handling, and XML external entity processing, improving the overall security posture of the code analysis tool. These changes demonstrate a focus on improving code quality and security best practices within the context of Java code analysis.
static-analyzerlintersonarcloudcoffeelanguage-team
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.