# Ricardo Morim

> AI Software Engineer · AI Security. Porto, Portugal.

I build AI systems, agents and automations, integrating security throughout the software development lifecycle. Currently at Critical Manufacturing, in the R&D Platform Engineering team.

## Experience

### Critical Manufacturing · AI Software Engineer
November 2026 — present
Member of the Platform Engineering team within Research & Development.

### Celfocus · Application Security Analyst
February — October 2026
Primary for AI Security and Vulnerability Management: main point of contact with AppSec leadership, coordinating members and tasks across both areas.
- Evaluated and adopted local models on an internal server; built an automated pull request reviewer and the runners to execute it.
- Created secure development skills and an agent for DAST and CTFs; configured fallback rules and automated skill deployment in a LiteLLM integration.
- Adapted an agentic development loop to integrate security from planning through QA, including the creation of security pipelines.
- Built a vulnerability management platform from scratch in React and Python/FastAPI: SLA tracking, observability, emails, tickets and monthly reports. Report generation went from several hours to under one hour.
- Automated repetitive tasks and implemented versioning and automated deployment for the team’s AWS Lambda functions.

### InnovatWeb · Main developer
Main developer of the organisation’s applications and shared CI/CD platform.
- Developed and maintain the shared SDLC: tests, builds, security analysis, DAST, releases and automated deployment across all organisation repositories.
- Developing applications for business management and engineering preparation in construction and precast manufacturing, alongside AWS infrastructure work in Terraform.

### INESC TEC · Software Engineering Internship
2025
Developed an Android prototype for augmented reality indoor navigation, with a Python backend, voice guidance and navigation between floors.

## Projects

### Agentic Assurance

Personal project · AI Security

Harness for agentic software engineering with executable security contracts.

- Protected policies and integrity verification
- Static analysis, test evidence and HTTP runtime checks
- Model review as a complementary signal alongside gates
- Profiles for Next.js, React/Vite, Spring Boot and HTTP APIs

Technologies: Python, AppSec, CI/CD, LLM Review

### Shared CI/CD — InnovatWeb SDLC

Professional work · Private repository

Shared pipeline platform used across all organisation repositories, developed and maintained by me as the main developer.

- Automated tests and builds
- Security analysis and DAST
- Release management and automated deployment
- A common SDLC maintained across applications

Technologies: CI/CD, AppSec, DAST, Release Automation

### Chess AI Engine

Deep Learning

Chess reinforcement learning project using Monte Carlo Tree Search and dual-head residual networks.

- PyTorch training pipeline
- Knowledge distillation from Stockfish
- Batch processing and mixed precision
- Search tree visualisation and position evaluation

Technologies: Python, PyTorch, Reinforcement Learning, MCTS, Cython

Repository: https://github.com/RicardoMorim/Chess

### Authentication Library

Open Source Library

Spring Boot authentication library published on Maven Central.

- JWT authentication and CSRF protection
- Redis-backed rate limiting
- PostgreSQL integration
- CI/CD with automated tests and security analysis

Technologies: Java, Spring Boot, PostgreSQL, Redis, JWT, GitHub Actions, Maven

Repository: https://github.com/RicardoMorim/auth-Provider/

### AI Resume Optimizer

LLM Integration

Resume optimisation application integrating a language model.

- Prompt engineering for structured JSON responses
- Evaluation across four criteria
- Token usage management
- Error handling for model integration

Technologies: Next.js, TypeScript, Node.js, MongoDB, LLM APIs, Prompt Engineering

Demo: https://jobresumebuilder.vercel.app

## Skills

- AI Engineering: Python, PyTorch, FastAPI, LLM Integration, Local Models, Agentic Workflows

- AI Security & AppSec: AI Security, Secure Development Skills, AI PR Review, Vulnerability Management, DAST, Security Pipelines, LiteLLM

- Software, Cloud & Automation: React, TypeScript, Java, Spring Boot, AWS, Terraform, Docker, CI/CD, PostgreSQL, Redis

## Education and certifications

- Master’s in Artificial Intelligence Engineering (2026–present)

- BSc in Informatics Engineering (2023–2026)

- AWS Certified Solutions Architect – Associate (Completed)

- CS50AI — Introduction to Artificial Intelligence (2023/2024)

- CS50x — Introduction to Computer Science (2021)

## Recommendation

> My overall assessment is very positive: he is a young engineer with excellent potential, autonomy, and technical maturity above the average for his level, ready to join international teams and demanding environments.

Prof. Fernando Cassola Marques, Phd researcher INESC TEC / Invited Professor FEUP

## Links

- Website: https://www.ricardomorim.com

- GitHub: https://github.com/RicardoMorim

- LinkedIn: https://www.linkedin.com/in/ricardo-morim-208368251/

- Resume: https://www.ricardomorim.com/resume.pdf

- API: https://www.ricardomorim.com/api/openapi

- MCP server: https://www.ricardomorim.com/api/mcp