SOC Analyst (Tier 1)

Rootedsec; Buenos Aires; Hybrid; ARS 1,200,000 - 1,800,000; Full time

Job summary

PwC Argentina is seeking a SOC Analyst (Tier 1) to join the Security Operations Centre in a hybrid Buenos Aires role. You will triage alerts, review surrounding activity, and escalate genuine incidents with clear evidence to the incident response team.

You will learn the company's systems quickly by seeing every part of them, working rotating shifts and documenting timelines while alerts evolve over time.

Qualifications

• Understands TCP/IP, DNS and HTTP well enough to read a packet capture.
• Can explain the difference between a scan and an intrusion.
• Writes clearly under time pressure.

Responsibilities

• Triage alerts against the runbook and escalate what does not fit it.
• Write the timeline of what happened while it is still fresh.
• Flag detections that fire constantly and are worth tuning.

Skills

TCP/IP

DNS

HTTP

Packet capture

Clear written comms

Incident escalation

Python/PowerShell scripting

SIEM exposure

Job description

Open rolePwC Argentina# SOC Analyst (Tier 1)Buenos Aires, Argentina· HYBRID## About the roleYou work in the Security Operations Centre on a rotating shift, reviewing alerts raised by the monitoring tools. For each one you check the surrounding activity, decide whether it is a false positive or a genuine incident, and escalate the genuine ones to the response team with the evidence you gathered. It is a common entry point into security: you learn the company's systems quickly because you see every part of them.### What you will do* Triage alerts against the runbook and escalate what does not fit it* Write the timeline of what happened while it is still fresh* Flag detections that fire constantly and are worth tuning### What they ask for* Understands TCP/IP, DNS and HTTP well enough to read a packet capture* Can explain the difference between a scan and an intrusion* Writes clearly under time pressure### Nice to have* Home lab* Any SIEM exposure* Scripting in Python or PowerShell## What applying with Rooted meansThis role accepts applications with Rooted context. Instead of sending only a resume, you can attach a verifiable credential with your proofs, rank, and technical evidence.Your application includes your Rooted credential: rank, verified proofs, and supporting evidence.You can read this role without an account. To apply you need a Rooted credential.This role is curated by Rooted. Rooted is not the hiring company unless explicitly stated. The hiring company is PwC Argentina. Confirm the final details with the original source or during the application process.Posted 2026-08-13