About

My MSc research at CISUC, University of Coimbra, produced a pipeline that rebuilds each vulnerable project in a Docker image matched to its compiler era, runs the original exploit, asks an LLM for a patch, and only accepts the fix once the exploit stops working and static analysis finds nothing new.

I am also Managing Partner at Aemyon, the software studio I co-founded in 2025 with two partners across security, design and AI. We build custom platforms and AI agents for clients, and our own suite, Aemyon Wave, runs access control and stock for large events.

Before all of that I spent years on the operational side of Coimbra's student life: running IT for Portugal's largest student association and helping organise nine editions of its two biggest festivals.

The full history is in the CV. For anything else, write to me.

Experience

Managing Partner, Aemyon

2025 to Present

Co-founded Aemyon in 2025 with two partners, each covering one discipline: security (mine), product and digital design, and artificial intelligence. We design, build and maintain custom platforms and AI agents, and run penetration tests, consulting and workshops.
Lead security and infrastructure for Aemyon Wave, our suite of event and team platforms (TicketWave, StockWave, BoardWave), which I deploy and operate on self-hosted servers.

Researcher, CISUC, University of Coimbra

Sep 2025 to Sep 2026

Designed and built a five-phase, project-agnostic pipeline for automated security-patch generation on C/C++: dataset construction, containerised reproduction, context-aware LLM patch synthesis, and validation that combines PoC execution, static analysis and an iterative feedback loop.
Evaluated on glibc, OpenSSL and tcpdump across eight LLMs: of 361 vulnerabilities, 178 were confirmed reproducible (oracle precision 0.961, recall 0.980), yielding 924 validated patches with 48.5% passing first validation.
Built EXPLOITFORGE, the dataset and reproduction component, released open source with the audited dataset.
Benchmarked hosted against self-hosted models: the strongest repaired at roughly 3 cents per vulnerability; self-hosted 32B models reached just under half that yield at no marginal cost.

Instructor (freelance), University of Coimbra

Mar to Jun 2026

Designed and taught a course on Security, Privacy and Digital Fraud on Social Networks to 115 participants, covering threat modelling, privacy practice and fraud prevention for non-technical audiences.

Head of IT, Associação Académica de Coimbra

2024

Co-authored the Digital Transition Action Plan 2023 to 2030, a 248-page infrastructure and digitalisation strategy for the association.
Led a team of 7 running the digital infrastructure of Portugal's largest student association (30,000+ members).

Education

MSc in Cybersecurity, University of Coimbra

2024 to 2026

Final grade 18/20. Thesis (19/20): Automated Patch Generation for Software Vulnerabilities Using Large Language Models, advised by Prof. Ibéria Medeiros and Prof. João R. Campos, CISUC Software and Systems Engineering group.

BSc in Computer Science, University of Coimbra

2021 to 2024

Publication

EXPLOITFORGE: Building Executable Vulnerability Instances from Real-World Software

T. Almeida, I. Medeiros, J. Pereira, J. R. Campos

Submitted to the 34th IEEE SANER 2027, Tools and Artifacts Track

Outside the lab

Festival supervisor, deputy coordinator, department head, Queima das Fitas & Festa das Latas, Coimbra

2022 to 2026

Nine editions across both festivals: collaborator (2022), department head (2023), festival supervisor (Queima 2024), second-in-command (Latada 2024), third-in-command for partnerships, logistics and access (Queima 2025). Sponsor and advisor since.

Volunteer and volunteer lead, Web Summit, Lisbon

2021 to 2022

Led an on-site volunteer team and supported press coordination.

Skills

Security: CVE/NVD analysis, PoC exploit curation, vulnerability reproduction, automated program repair, threat modelling
Languages: C, Python, Bash, SQL
Tooling: Docker, Git, GDB, Valgrind, AddressSanitizer, GCC/Clang, Make/Autotools, Linux
AI / ML: OpenAI and Anthropic APIs, Ollama
Other: Project management, team coordination, stakeholder relations, technical writing
Spoken: Portuguese (native), English (C1 Cambridge), Spanish (intermediate)