Guillermo Tosetti

Cybersecurity Analyst (Blue Team) · Blue Team Level 1 (BTL1) — Argentina.

I'm a cybersecurity analyst on the defensive side. Most of my work happens in Wazuh: reading alerts, deciding which ones matter, and writing down what actually happened. I hold the BTL1 certification and spent three months doing this work at CoderCraft.

Experience

Cybersecurity Analyst — CoderCraft (3 months in 2026): Wazuh alert triage for Windows and Linux endpoints, rule tuning, incident notes.

Projects

Wazuh SIEM home lab — a Wazuh manager, three monitored endpoints and an attacker VM.
Phishing triage playbook — a four-step process for handling a reported email.
SSH brute force to persistence — one incident worked from detection to a NIST-style report.

Certifications

BTL1 — Blue Team Level 1, Security Blue Team

Contact

Email: contact@guillermotosetti.com · LinkedIn · GitHub