> Markdown version of [/jobs/ext/3179396-soc-analyst](https://www.wearedevelopers.com/jobs/ext/3179396-soc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SOC Analyst

- **Company:** Orro Pty Ltd
- **Location:** London, UK
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Microsoft Antivirus, Unix, Cyber Security, Linux, Digital Forensics, Phishing, Security Information and Event Management, Software Vulnerability Management, Mitre Att&ck, Firewalls (Computer Science), Cybercrime, Microsoft Sentinel, SentinelOne Expertise, Qualys, Vulnerability Analysis
- **Published:** September 25, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=14dba9898caedfb5

## About the Role

You are structured, proactive and thrive in environments where accuracy matters. You bring more than three years of relevant experience and a strong technical foundation across detection, analysis and incident response., * 3+ years hands on experience in an enterprise SOC, with daily use of SIEM, XDR or EDR tooling

 * Hands on experience with security technologies including Microsoft Sentinel, Microsoft Defender and SentinelOne EDR / AI SIEM.
 * Practical incident response experience, including triage, investigation and escalation
 * Working knowledge of MITRE ATT&CK, NIST CSF and ISO 27001
 * Clear communicator able to translate technical detail for any audience

Bonus points

 * Exposure to digital forensics or threat hunting workflows
 * Confidence working across Linux or Unix environments alongside Microsoft
 * Broad understanding of cloud, networking, firewalls, ITSM and vulnerability management tools such as Rapid7, Tenable or Qualys

## Description

As part of the Security Operations Centre, you will work across daily operations, threat analysis and proactive defence activities. You'll collaborate closely with your SOC peers to strengthen detection capability and deliver meaningful outcomes for customers.

 * Dive into SIEM events, track emerging threats and uncover intrusion attempts
 * Take charge of incident response, moving quickly from triage to escalation and resolution
 * Analyse phishing activity, suspicious domains and IPs to identify real risks fast
 * Lead threat hunting and vulnerability assessments to stay ahead of attackers
 * Build smart, high fidelity detections through alert tuning, rule creation and system enhancements
 * Mentor junior analysts and help lift the capability of the wider SOC
 * Champion security implementations and deliver proactive support that drives strong customer outcomes


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [WeAreDevelopers LIVE - Node and Package Security](https://www.wearedevelopers.com/videos/2138-wearedevelopers-live-node-and-package-security)
- [ The attacker's footprint](https://www.wearedevelopers.com/videos/375-the-attacker-s-footprint)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)
- [The Time Paradox: Building Timezone-Safe Python/Django Applications](https://www.wearedevelopers.com/videos/1915-the-time-paradox-building-timezone-safe-python-django-applications)

## Related Articles

- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)