Anthony Tropeano

• Designed and operate a Linux virtualization platform with automated VM provisioning and VUTM protection for KVM and LXC networks. Built validation, rollback, and fail-closed handling into network changes and inspection transitions.
• Built an Ansible-managed SOC/NOC across two Proxmox nodes. Combined Wazuh host telemetry, network inspection, and operational dashboards to support investigation and ongoing administration.
• Developed a shared safety harness to enforce policy at coding agents' tool boundaries. It checks commands and filesystem access before execution, scans introduced content for malware, and filters secrets. Ownership checks and change receipts support review.
• Researched and authored security governance and cryptographic engineering standards using NIST, FIPS, and RFC sources. Defined implementation requirements and verification criteria for applications, infrastructure, and agent-assisted development.

• Mentored cybersecurity students in Python, debugging, and development environment setup.
• Created reusable guides for recurring Python and environment problems, extending support beyond individual sessions.

• Eliminated hosting costs by rebuilding a legacy Wix site with Next.js, TypeScript, and Tailwind, then deploying it to Vercel.

• Reviewed MERN applications across partner programs for architecture, code quality, and assignment requirements.
• Maintained consistent grading standards through curriculum changes and verified the integrity of submitted work.

• Managed scheduling, client communication, and cost control for $1M-$1.5M in annual projects.

TrashScanner

TypeScript, Bun, Hono, React, MariaDB, Ed25519

• Developed and launched an offline-first progressive web application (PWA) using TypeScript, React, and Bun. Users scan products as they run out to maintain shopping lists across phones, desktops, and USB-scanner kiosks.
• Designed offline support for list creation, scanning, and item editing. Changes synchronize in order when connectivity returns, with MariaDB operation records preventing duplicate writes during retries.
• Built account protection around verified sessions, Ed25519 device signatures, and ownership checks within database queries. These controls bind protected operations to the requesting account and its authorized resources.

VUTM

Ubuntu, KVM, LXC, Suricata, nftables, Unbound, WireGuard

• Built a shared network security layer for KVM virtual machines and LXC containers on an Ubuntu virtualization host. Centralized encrypted DNS, threat filtering, and Suricata inspection across protected virtual networks.
• Designed an IDS-to-IPS transition that derives candidate rules from observed workload traffic and validates them before activation. Added fail-closed handling during transitions and recovery. Operate the platform daily in IDS mode; inline blocking remains pending.

SAFE-PC

Python, Proxmox VE, OPNsense, Suricata, ZFS

• Developed an automated security-appliance framework to repurpose obsolete PCs for small-office and home-office networks. A Proxmox and OPNsense deployment has operated since November 2025.
• Automated media verification and unattended firewall installation using asynchronous Python and serial-console control. The hardware case study completed automated configuration in 27 minutes.

O-Tether

Linux, Bash, nftables, Suricata, Unbound, systemd

• Engineered and deployed an ARM network-security appliance for RV use. Automated iPhone USB tethering and teardown so devices retain their existing Wi-Fi configuration without routine network administration.
• Resolved older Linux kernel limitations with transactional nftables updates. Integrated encrypted DNS and Suricata inspection with fail-closed activation, enabling forwarding only after the protected network path is ready.

SIGINT

TypeScript, React, Bun, Canvas 2D, Web Workers

• Built and deployed an OSINT dashboard that brings fragmented public event feeds into one global view. Added source correlation and scored alerts to help users interpret related reports.
• Designed a custom Canvas 2D globe rendered in Web Workers. Moving continuous rendering off the main thread keeps React available for interaction as live data changes.