João Silva
Software Engineer at Snyk
Leiria, Portugal
Summary
👤
Senior🎓
Top SchoolJoão Silva is a seasoned software engineer based in Leiria, Portugal, with 10 years of experience specializing in Python and Django and a strong focus on backend security. He has progressed through senior and team lead roles across companies like xgeeks, CheMondis, Probely, and now Snyk, combining hands-on implementation with leadership in production services. An active open-source contributor to the well-known ZAP (Zed Attack Proxy) project, he has improved core security analysis features—adding history fields, preserving GZIP exports, and handling unencoded redirects—demonstrating practical expertise in application security tooling. João’s background in building robust HTTP parsing and alerting enhancements reflects a knack for finding subtle edge cases that improve real-world resilience.
10 years of coding experience
6 years of employment as a software developer
Bachelor's degree, Computer Science, 17, Bachelor's degree, Computer Science, 17 at Polytechnic of Leiria
Github Skills (8)
javas10
security-scan10
java10
security-scanner10
security10
api8
apim8
api-design8
Programming languages (5)
Github contributions (5)
zaproxy/zaproxy
May 2020 - Mar 2022
The ZAP by Checkmarx Core project
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:8 reviews, 5 commits, 10 PRs in 1 year 11 months
Contributions summary:João contributed to the core logic of the ZAP project, implementing features related to the history table by adding new columns for host, path, and query. They also addressed a parsing error, enhancing the application's robustness when handling JSON requests. Additionally, they improved the handling of HTTP responses by fixing an issue related to the export of GZIP responses, ensuring that new lines are preserved. Furthermore, the user added support for unencoded redirects and incorporated the input vector to alerts, enhancing the security analysis capabilities of ZAP.
owasp-zapzap-developmentsecuritydastowasp
DiogoMRSilva/websitesVulnerableToSSTI
Mar 2018 - Oct 2022
Simple websites vulnerable to Server Side Template Injections(SSTI)
Contributions:29 commits, 23 PRs, 36 pushes in 4 years 8 months
vulnerablesecurityinjectionsvulnerabilityserver-side
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.