Guillermo Tosetti

SOC Analyst · BTL1 certified — Córdoba, Argentina. Open to SOC Analyst L1 roles, remote or hybrid.

SOC analyst focused on threat detection, alert triage and incident investigation. I deployed a SIEM on Wazuh and Falco at MOB-WEB and run my own detection lab with Wazuh, Sysmon, Windows 11 and Kali.

Experience

Security Operations Center Analyst — MOB-WEB, independent (May 2025 — Nov 2026): SIEM on Wazuh and Falco, 133 custom detection rules, detection as code.
Quality Analyst — Montironi (Oct 2024 — Aug 2026): process data analysis, incident documentation, root causes.

Projects

Eslabon v2 — static scanner for malicious PyPI/npm packages, mapped to MITRE ATT&CK, validated on Wazuh: github.com/GTosetti/eslabon-v2
SOC Home Lab — Wazuh, Sysmon and Kali, built to measure where detection fails: github.com/GTosetti/Proyecto-1

Certifications

Blue Team Level 1 (BTL1) — Centri, passed 2026-11-04, ID 675559243 — Credly · PDF
Ethical Hacker — Cisco Networking Academy (Sept 2026)

Contact

Email: guillermo.tosetti02@gmail.com · LinkedIn · GitHub