João Cruz
Group Leader at Checkmarx
Braga, Portugal
Summary
🤩
Rockstar🎓
Top SchoolJoão Cruz is an engineering-driven software leader with four years of professional experience shaping static analysis tooling at Checkmarx, where he progressed from software developer to Group Leader. He combines a strong academic foundation in Informatics Engineering with specialized master-level training in Formal Methods and Language Engineering, applied to parsing, query construction, and program analysis across many languages. At Checkmarx he has led R&D teams on the company’s flagship SAST product while remaining hands-on in design and development. Comfortable across the full lifecycle—from grammars and parsers to verification and testing—he brings both technical depth and practical delivery focus. Based in Braga, Portugal, João is as likely to debate a formal proof as to shepherd a sprint to completion, blending research-informed rigor with pragmatic team leadership. Notably, his background in language engineering gives him an edge in tackling complex static-analysis challenges that lie at the intersection of compilers and security.
4 years of coding experience
11 years of employment as a software developer
Bachelor's Degree, Informatics Engineering, Bachelor's Degree, Informatics Engineering at Universidade do Minho
English, Portuguese
Github Skills (16)
golang10
security10
attestation10
cycle10
compliance10
infrastructure-as-code10
vulnerabilities10
devsecops10
infrastructure10
vulnerability-detection10
sca10
vulnerability-scanners10
open-policy-agent10
supply-chain-security10
checkmarx10
Programming languages (1)
Github contributions (2)
Checkmarx/kics
Jul 2021 - Sep 2021
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
Contributions:1 review, 44 commits, 46 PRs in 2 months
kicscyclecompliancevulnerability-scannersiac
dennisSilvaCX/kics
Sep 2021 - Sep 2021
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
Contributions:2 commits in 3 days
kicscyclecompliancevulnerability-scannersmisconfigurations
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.