> Markdown version of [/jobs/ext/1122629-jnr-soc-analyst](https://www.wearedevelopers.com/jobs/ext/1122629-jnr-soc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Jnr SOC Analyst - **Company:** Orro Cyber - **Location:** Cardiff, UK - **Experience:** Starter - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Cloud Computing, Cyber Security, Linux, IP Addressing, Microsoft Security Essentials, Open Source Intelligence, Phishing, Security Information and Event Management, Software Vulnerability Management, Scripting, Mitre Att&ck, Microsoft Sentinel, Windows Security, Splunk, SentinelOne Expertise, Qualys - **Published:** July 1, 2026 - **Apply:** https://www.apply4u.co.uk/jobs/x/40486506/ ## About the Role Investigate phishing emails, suspicious domains, and IP addresses using OSINT and threat intelligence sources. Proactively monitor, analyse, and escalate security events and incidents in collaboration with other SOC team members. Assist in the configuration, administration and enhancement of security tools and platforms. Support implementation of security projects for internal and customer environments, including troubleshooting and client interaction. Contribute to the development and improvement of detection rules and response workflows using MITRE ATT&CK and Cyber Kill Chain models. Deliver outstanding operational support, actively driving outcomes for customers. What You'll Bring You bring curiosity, structure, and a hunger to learn plus a great team spirit and a growing passion for cyber security. Ideally, your toolkit includes: 1-2 years of experience in a SOC or related cyber role. Exposure to AI SIEM, XDR or EDR platforms such as Splunk, Microsoft Sentinel or SentinelOne Experience with Microsoft Security platforms and Windows security fundamentals. Familiarity with Linux/Unix-based systems and basic scripting knowledge. Exposure to vulnerability management tools like Rapid7, Tenable, or Qualys. Understanding of the MITRE ATT&CK Framework and Cyber Kill Chain. Ability to communicate technical information clearly to both technical and non-technical audiences. Awareness of cloud computing, networking, firewalls and ITSM processes. Even if you don't tick every box, don't let that hold you back. If this sounds like your kind of challenge, we'd genuinely love to hear from you. Growth @ Orro Cyber At Orro, the Cyber team places a strong focus on continuous learning and professional growth. We actively encourage employees to pursue certifications and training aligned to their role and career goals. Commonly supported certifications include Microsoft AZ-500, MS-100, MS-200, MS-300, and MS-401, along with vendor-specific programs such as Splunk ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Getting under the skin: The Social Engineering techniques](https://www.wearedevelopers.com/videos/38-getting-under-the-skin-the-social-engineering-techniques) - [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)