emmekappa23
@EmmeKappa23
Marco Bellingeri
Cloud & AI Security Engineer | Python · AWS · AI Agents · DevSecOps.
About
Cloud & AI Security Engineer building production systems where AI, cloud infrastructure, and security meet. I work with Python, AWS, FastAPI, LLMs, RAG, AI agents, MCP, Docker, Kub... Show more
Top Skills
AI Security
•
Cloud Security
•
DevSecOps
•
Python
•
LLM Engineering
•
Rag
•
AI Agents
•
MCP
•
AWS
•
FastAPI
•
Docker
•
OWASP
•
OpenTelemetry
Unlock hidden informations
You don't have access to some informations of @EmmeKappa23's profile. Become a pro subscriber to unlock them and get access to more amazing features.
Experience
work
Technical Writer & Security Reviewer (Freelance)
MAXIM AI
Sep 2026 - PresentWrote a commissioned dev.to article comparing the Bifrost and LiteLLM AI gateways with a documented method: official benchmark tool, simulated provider, alternating runs, median of three. Ran a security review of both gateways with CodeQL and Semgrep Pro (code, supply chain, data flow), audited the default Helm, Terraform and Compose configs, and reported client-related findings privately, outside the article.
work
AI Engineer Cloud Platform & Security
VETRERIA MONFERRINA
Mar 2026 - PresentBuilt a production website and AI agent for an operating business. Astro on Vercel behind Cloudflare WAF, hash-based CSP without unsafe-inline, HSTS, Playwright CSP tests. Required checks: CodeQL, Semgrep, OWASP ZAP, zizmor, Dependabot. Least-privilege Gemini review agents. MonferrinoAI: LangGraph agents, hybrid pgvector and full-text search with RRF gated on recall@k and MRR, EU-hosted traces, AI Act Article 50 output labeling.
work
Full-Stack Engineer | Cloud Platform
FAIRFIELD S.p.A.
Dec 2025 - Feb 2026Built an enterprise debt collection platform: Python/Falcon backend with Clean Architecture and DDD, 100+ REST endpoints, 50+ MySQL tables, 35+ background jobs, 23+ Lambda functions, integrated with SQS, SNS, SES, S3 and Pinpoint. Secured the APIs with a JWT Lambda Authorizer and authorization-checked presigned S3 URLs. Built a Pandas/NumPy commission system with multi-format reports and a React/TypeScript PWA.
work
Cloud Platform | Security Engineer
GECO S.r.l.
Apr 2025 - Dec 2025Rome Metro Line C: RTSP supervisor monitoring about 400 displays 24/7 with MediaMTX and FFmpeg, backoff restarts, graceful shutdown, credential masking. Etihad Airways: Scapy-based diagnostics for a private perimeter-security network (routing, DNS, speed tests, postmortem logs). CI/CD with Bandit and pip-audit, Prometheus and Grafana monitoring. Functional analysis with EARS requirements, BPMN 2.0 and ISTQB acceptance criteria.
Education
lock
Education Hidden
Upgrade to Pro to view this education.
Projects
code
Website
Visit Project open_in_new Jul 2027 - PresentAstro (static), bilingual EN/IT, security-by-design, AI-assisted monthly RAG magazine. Deployed on Cloudflare.
code
Agentic-os
Visit Project open_in_new Jul 2026 - PresentPersonal AI ops platform: Claude Code observability hub (OTel Collector → Prometheus → Grafana + status API) on Railway behind a Cloudflare Tunnel.
code
LLM-Council
Visit Project open_in_new Jul 2026 - PresentMulti-model anti-sycophancy verification council via OpenRouter (stdlib-only Python, ZDR-compliant, OWASP LLM Top 10 hardened).
code
Torino Parking
Visit Project open_in_new Feb 2026 - Jul 2026Real-Time Parking API Platform: FastAPI, PostgreSQL/PostGIS, Redis
Language & Tools
Python · FastAPI · AWS · Docker · Kubernetes · Terraform · PostgreSQL · React · TypeScript · GitHub Actions · RAG · LLMs · AI Agents · MCP · OpenTelemetry · Prometheus · Grafana · OWASP.
Currently Exploring
AI Security · Agentic Systems · MCP Security · Prompt Injection · LLM Observability · Adversarial Testing.
Achievements
Open-source AI & security projects · Claude Code Hackathon project · Production cloud infrastructure · Technical writing on AI security and adversarial testing.
Fun Fact
I like breaking systems in staging so they don't break in production.
Random Dev Quote
I build it. I break it. I secure it.
Contributions
Articles
- I made my portfolio site audit its own security headers, live, in front of you.Oct 27, 2026
- Thirteen PRs in one afternoon, and the boring rule that made it possible.Oct 27, 2026
- The Guardian blocked the command. The agent told me how to go around it.Oct 27, 2026
- Cross-posting to dev.to without giving away your SEO.Oct 27, 2026
- My quality gate wasn't strict. It was dead.Oct 27, 2026
Comments
- @[YaoshenLuo] Thanks for reading! What helped me was splitting the pr...Oct 27, 2026
- @[hetptis] For me, the biggest factor is how the gateway behaves under...Sep 27, 2026
- @[Gift Balogun] Exactly. That separation is the whole thing for me.
a...Sep 27, 2026
- @[Dr. rossi] That is exactly the part that changed how I think about t...Sep 27, 2026
chevron_left