About the job The SOC Analyst is responsible for the continuous monitoring, triage, and investigation of security events across the organization's environment, as part of a integral follow-the-sun Security Operations Center.
This position reports to the SOC Lead.
The role goes beyond acknowledging alerts: the focus is on understanding what each alert means, investigating suspicious activity end to end, responding to real threats, and handing over cleanly between regions so that nothing is lost across shifts.
The ideal candidate has solid SOC experience, a strong investigative mindset, and thrives in a fast-paced, fully remote setting where accuracy, discipline, and security are essential.
Hands-on engineering experience with core security platforms is a big plus.
Responsibilities Monitor, triage, and analyze security alerts and events from the organization's security stack, including SIEM, Endpoint Detection and Response (EDR), Security Service Edge (SSE), and Web Application Firewall (WAF) platforms.
Investigate security incidents end to end,



from initial triage through analysis, containment, eradication, and post-incident documentation, coordinating with relevant teams throughout.
Determine the scope, severity, and impact of security events, separating true positives from false positives and escalating confirmed incidents according to defined procedures.
Execute response actions within the security platforms, such as isolating endpoints, blocking indicators, disabling compromised accounts, and enforcing access restrictions.
Ensure structured, high-quality shift handovers across regions in the follow-the-sun model, so that open investigations, ongoing incidents, and pending actions continue seamlessly around the clock.
Proactively threat hunt across endpoint, network, and log data to uncover suspicious activity that existing detections may have missed, mapping findings to frameworks such as MITRE ATT

📌 Soc Analyst (12:00–21:00 Utc) (Buenos Aires)
🏢 UBQ Group
📍 Buenos Aires