Looking for a job

Vonn Penaranda

@vonnpenaranda

Senior Security Analyst at Espire Infolabs investigating threats across AWS, endpoints, and proprietary applications using MITRE ATT&CK.

Philippines

Message

At Espire Infolabs, I provide 24/7 security monitoring, alert triage, investigations, and incident response across endpoints, AWS infrastructure, and proprietary applications. I manage incidents through ServiceNow, apply NIST guidelines, and map findings to MITRE ATT&CK.

Previously, I worked in SOC roles at Netlink Voice and Nuspire, investigating security events and supporting detection improvements. My earlier network engineering work at SNP TRANSFORMATIONS, INC. and Concentrix covered enterprise network and security infrastructure, including Cisco and Fortinet equipment.

Experience

Work history, roles, and key accomplishments

Current

Senior Security Analyst

Current

Espire Infolabs

Jan 2024 - Present (2 years 9 months)

• Provide 24/7 security monitoring, alert triage, investigation, and incident response across global endpoints, AWS cloud infrastructure, and high-volume proprietary applications.
• Investigate and prioritize security alerts across EDR, SIEM, cloud, network, email security, and DLP platforms, including CrowdStrike, Microsoft Defender, AWS CloudWatch, Sysdig, OpenSearch, Wazuh, Vectra CDR, Zscaler,

Current

Security Operations Center Analyst

Current

Espire Infolabs Inc. (Client: Sportradar)

Jan 2024 - Present (2 years 9 months)

1. Provide 24/7 security monitoring, alert triage, investigation, and incident response across global endpoints, AWS cloud infrastructure, and high-volume proprietary applications.

1. Investigate and prioritize alerts from EDR, SIEM, cloud, network, email security, and DLP platforms — including CrowdStrike, Microsoft Defender, AWS CloudWatch, Sysdig, OpenSearch, Wazuh, Vectra CDR, Zscaler, and Ak

Security Operations Center (SOC) Engineer

Netlink Voice

Aug 2022 - Dec 2023 (1 year 4 months)

• Monitored, detected, investigated, responded to, and remediated security events across internal and customer environments.
• Analyzed security events from multiple sources, prioritized alerts, and escalated high-severity incidents appropriately.
• Supported detection engineering through content development, tuning recommendations, proactive threat hunting, and security intelligence.
• Identified

Security Operations Center Analyst

Nuspire

Jul 2021 - Jul 2022 (1 year)

• Monitored security equipment and systems across customer environments, including IDS, IPS, firewalls, and SIEM platforms.
• Analyzed raw and processed security events to identify potential incidents, threats, and vulnerabilities.
• Performed initial incident investigation and escalated significant findings to Security Analysts for further analysis and response.
• Troubleshot and resolved issues

Network Engineer

SNP TRANSFORMATIONS, INC.

May 2019 - Feb 2021 (1 year 9 months)

• Remotely supported, configured, maintained, and troubleshot enterprise network and security infrastructure.
• Managed Fortinet and Cisco ASA firewalls, including configuration, administration, and troubleshooting.
• Supported Cisco routers and switches and provided secondary support for Microsoft server environments.
• Performed network troubleshooting and resolved infrastructure-related issues

Network Operations Center (NOC) Engineer

Concentrix

Nov 2017 - Mar 2019 (1 year 4 months)

• Provided remote support, monitoring, configuration, and troubleshooting for enterprise network and security infrastructure.
• Managed Fortinet and WatchGuard firewalls, including VLANs, VPN tunnels, security policies, onboarding, and administration.
• Supported Cisco routers and switches and Windows/Linux servers, desktops, and laptops.
• Investigated network and security alerts by analyzing log

Senior Technical Support Specialist

Sykes Asia Inc.

May 2016 - Apr 2017 (11 months)

- Support team interfaces with internal AT&T affiliates, external equipment vendors and Provides higher level of technical assistance through technical phone support for Voice over Internet Protocol (VoIP) supported equipment (Cisco and client managed equipment) and acts as customer interface for trouble resolution.
- Cisco, Network & VOIP/SIP Maintenance