Security Researcher
Investigating malicious packages and attacks on the software supply chain.
About me
I'm Raphael Silva, a security researcher based in Portugal. I work at Aikido Security, investigating malicious packages and software supply-chain attacks. I also do freelance pentesting with Ethiack.
Before that, I worked at Checkmarx, moving from application security analysis into research and then leading a supply-chain security research team.
Talks & workshops
Selected talks
[ All talks ]
Workshops & challenges
Work
Penetration Tester
Web application security assessments for customer environments.
Lead Security Researcher, Supply-Chain Security
Checkmarx
Led a security research team working on IDEs, CI/CD, LLMs and software supply-chain attacks.
Analyzed malware, developed YARA rules and contributed research to new product capabilities.
Security Researcher
Checkmarx
Researched programming-language support, coordinated vulnerability research in open-source projects and performed white-box testing of internal web applications.
Helped developers and customers with application security questions.
Application Security Analyst
Checkmarx
Reviewed source code and findings from security tools, researched vulnerabilities, built internal analysis tools and helped developers with remediation.
Performed white-box testing and later coordinated research projects and internal knowledge-sharing sessions.
Web Developer
Midtones Creative
Built lightweight, responsive online menus for restaurants using HTML, CSS, JavaScript, Node.js, Express and MySQL.
Education & certification
BSc, Engineering and Management of Information Systems
University of Minho
Web Application Penetration Tester eXtreme (eWPTXv2)
What I work on
- Software supply-chain security
- Malware analysis
- Vulnerability research and secure code review
- Web application penetration testing
Languages
- Portuguese
- English