Juan Ariza Toledano
Staff Software Engineer at VMware
Spain
Summary
🤩
RockstarJuan Ariza Toledano is a Staff Software Engineer based in Spain with a decade of experience building secure, cloud-native infrastructure and developer tooling. Currently at VMware by Broadcom, he brings deep expertise in CI/CD, containerization, and Helm chart maintenance, reflected in substantive open-source contributions to Bitnami's containers and charts. He has a strong security orientation, contributing to Trivy to improve vulnerability detection, SPDX handling, and CSAF filtering for more accurate scans. Juan’s work often spans both development and DevOps responsibilities—fixing test suites, hardening build logic, and enabling features like RBAC and TLS in production images. Colleagues describe him as a pragmatic engineer who bridges operational reliability and security, with a knack for improving test automation in complex Kubernetes ecosystems. His profile shows a pattern of tackling behind-the-scenes reliability issues that materially reduce release risk for large-scale container deployments.
10 years of coding experience
Stackoverflow
1,038reputation
66kreached
58answers
0questions
Github Skills (36)
kubernetes10
devsecops10
container10
docker10
vulnerability-scanners10
charts10
sbom10
bash10
dockers10
cicd10
security10
go10
vulnerability-detection10
helm10
kubernetes-pods10
Programming languages (15)
Github contributions (5)
bitnami/charts
Jul 2016 - Nov 2022
Bitnami Helm Charts
Role in this project:
DevOps Engineer
DevOps EngineerContributions:2340 reviews, 97 commits, 2601 PRs in 6 years 5 months
Contributions summary:Juan primarily contributed to the `bitnami/charts` repository, which provides Helm charts for deploying applications on Kubernetes. Their work focused on improving existing chart functionality through the use of merge helpers and fixing Cypress tests. The user demonstrated expertise in testing, CI/CD, and chart maintenance, ensuring the robustness and reliability of the provided Helm charts. Several commits involved updating and adapting test suites related to specific charts such as SeaweedFS, Cilium, and KeyDB.
chartshelmhelm-chartskubernetesvmware
aquasecurity/trivy
Jul 2023 - Feb 2025
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Role in this project:Back-end & Security Engineer
Back-end & Security EngineerContributions:54 reviews, 3 PRs, 75 comments in 1 year 6 months
Contributions summary:Juan primarily contributed to the security and vulnerability detection aspects of the Trivy project. Their commits demonstrate a focus on integrating support for scanning Bitnami components, handling SPDX files, and incorporating package identifiers into vulnerability reports. The user also worked on enhancing the CSAF format support for vulnerability filtering, improving the accuracy of vulnerability assessments.
vulnerability-scannersiacmisconfigurationsrepositoriessecurity-tools
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.