Flavio Bosco // tr3sor

$ cat /whoami

Engineering leader focused on backend stability, system performance and resource optimization. With over 15 years of experience, I specialize in making things work under tight budget constraints, avoiding resource waste, and ensuring high availability through smart architecture.

Tech enthusiast and hardware hacker since childhood — my journey started with a Macintosh Performa 475 (2MB RAM), sparking a lifelong obsession with computing and electronics. I don't just use technology; I deconstruct it. Whether it's debugging complex backend logic or repairing physical components, I'm driven by the challenge of finding efficient solutions where others see a dead end.

I work end-to-end and self-sufficient: I can take a project from idea to production alone — or with minimal help — owning architecture, backend, frontend, infra and security. I don't bring problems to the table; I bring solutions.

"If it's not fast and efficient, it's not finished."

$ cat /experience

• Head of Analyst Engineering · PhishFort 2021 — 2026

  • Led engineering for anti-phishing operations.
  • Optimized backend systems for performance and cost-efficiency.
  • Architected brand-protection tools focused on high reliability.
  • Managed technical teams and cross-provider cloud infrastructure.

• University Professor · Escuela Da Vinci 2023

  • Academic instruction in software engineering.

• Software Developer · Freelance 2009 — 2022

  • 13+ years of full-stack delivery and system optimization.

$ cat /now

• Prospectorz — the curated marketplace where vetted security startups get qualified demos with enterprise practitioners, and practitioners get compensated for structured feedback. Full-stack: React, Hono, Cloudflare Workers, D1, KV.
• Brand protection — developing a serverless brand-protection and phishing-detection platform, running 100% on Cloudflare.
• Security research — bug hunting with a focus on Web3 / crypto ecosystems.

$ cat /security

Security and efficiency are my main battleground. I build tooling that catches typosquatting, domain permutations and brand impersonation before users ever click: domain monitoring, favicon-based asset discovery, ML-powered classifiers and automated detection pipelines.

Years of OSINT and reverse engineering work, and a deep interest in how attackers build their infrastructure — the best way to defend against it is to understand it piece by piece.

$ cat /stack

languages

TypeScript JavaScript Python Rust C++ PHP ASM SQL

backend

Node.js Hono REST APIs serverless WebSockets

frontend

React Three.js HTML/CSS browser extensions

cloud / infra

Cloudflare Workers D1 KV R2 AWS GCP Vercel Heroku Docker Kubernetes GitHub CI/CD

data

MySQL SQL Server MongoDB PostgreSQL Firebase Firebird SQLite

testing / tooling

Playwright Vitest Git Wrangler Vite Tailwind CSS Linux CLI PowerShell / Bash

ml / ai

TensorFlow.js Cloudflare Workers AI text classification model training feature engineering LLM tooling RAG

security

reverse engineering OSINT phishing detection typosquatting VAPT bug bounty Web3

hardware

electronics repair soldering iron for anything with pins

$ cat /education

google

IT Support Professional — Technical Support Fundamentals · OS Power User · System Admin & IT Infrastructure

cloud / infra

Introduction to Kubernetes (LFS158) · Cloudflare & Network Optimization

software

React.js Certified Specialist

$ cat /contact

• [email] [email protected]
• [github] @xtr3sor
• [linkedin] linkedin.com/in/tr3sor
• [twitter] @tr3sor_
• [web] www.tr3sor.win