PwC Argentina
SOC Analyst (Tier 1)
Buenos Aires, Argentina· HYBRID
About the role
You work in the Security Operations Centre on a rotating shift, reviewing alerts raised by the monitoring tools. For each one you check the surrounding activity, decide whether it is a false positive or a genuine incident, and escalate the genuine ones to the response team with the evidence you gathered. It is a common entry point into security: you learn the company's systems quickly because you see every part of them.
What you will do
- Triage alerts against the runbook and escalate what does not fit it
- Write the timeline of what happened while it is still fresh
- Flag detections that fire constantly and are worth tuning
What they ask for
- Understands TCP/IP, DNS and HTTP well enough to read a packet capture
- Can explain the difference between a scan and an intrusion
- Writes clearly under time pressure
Nice to have
- Home lab
- Any SIEM exposure
- Scripting in Python or PowerShell
What applying with Rooted means
This role accepts applications with Rooted context. Instead of sending only a resume, you can attach a verifiable credential with your proofs, rank, and technical evidence.
Your application includes your Rooted credential: rank, verified proofs, and supporting evidence.
You can read this role without an account. To apply you need a Rooted credential.
This role is curated by Rooted. Rooted is not the hiring company unless explicitly stated. The hiring company is PwC Argentina. Confirm the final details with the original source or during the application process.
Posted 2026-08-13