SOC Analyst II — AI-Driven Security & Incident Response

Xerox Philippines; Cebu City; On-site; PHP 500,000 - 700,000; Full time

Job summary

Xerox Philippines is seeking a Level 2 SOC Analyst to protect our information systems by monitoring, detecting, and investigating security threats. You will leverage AI-assisted capabilities to accelerate triage, while validating outputs against telemetry and runbooks.

The role emphasizes thorough documentation, escalation as needed, and collaboration across security teams. The ideal candidate has a strong analytical background, experience with SIEM/EDR, and a track record of hypothesis-driven

Qualifications

• Bachelor's degree in computer science, information technology, or a related field (or equivalent practical experience).
• 2+ years of experience in a Security Operations Center, security monitoring, or incident triage/investigation role (Level 2 or equivalent).
• Applied proficiency and experience investigating alerts using SIEM queries/pivots and one or more of the following: EDR/XDR, IAM/IdP telemetry, cloud audit logs, email security, network telemetry.
• Strong analytical and problem-solving skills; ability to conduct hypothesis-driven investigations and produce defensible conclusions.
• Strong written and verbal communication skills; ability to collaborate effectively across teams and produce case notes suitable for peer review and audit.

Responsibilities

• Monitor and triage security alerts and events using security tools and technologies (e.g., SIEM, EDR/XDR, IAM/IdP telemetry, email security, cloud audit logs).
• Investigate medium-to-complex alerts to determine scope, impact, and likely root cause; build defensible incident narratives grounded in evidence.
• Perform cross-source correlation and create timelines across endpoint, identity, network, and cloud/SaaS telemetry to validate detections and identify related activity.
• Use hypothesis-driven investigation techniques: generate competing hypotheses, design targeted tests, and update conclusions as evidence changes.
• Make risk-based decisions aligned to runbooks (e.g., contain vs monitor); document rationale, confidence level, and next steps.
• Document investigations in the case management system, including queries used, evidence excerpts, timeline, decisions, actions taken, residual risk, and handoff notes.
• Provide structured feedback to detection engineering/ML stakeholders (TP/FP label and rationale, telemetry gaps, tuning recommendations) to improve alert fidelity.
• Maintain up-to-date knowledge of cybersecurity threats, attacker techniques, and detection best practices.

Skills

Analytical thinking

Problem solving

Communication skills

Hypothesis-driven investigations

Validation of AI outputs

Education

Bachelor's degree in Computer Science/Information Technology or related field

Equivalent practical experience

Tools

SIEM

EDR/XDR

IAM/IdP telemetry

Cloud audit logs

Email security

Network telemetry

Job description

Xerox Philippines is seeking a Level 2 SOC Analyst to protect our information systems by monitoring, detecting, and investigating security threats. You will leverage AI-assisted capabilities to accelerate triage, while validating outputs against telemetry and runbooks.

The role emphasizes thorough documentation, escalation as needed, and collaboration across security teams. The ideal candidate has a strong analytical background, experience with SIEM/EDR, and a track record of hypothesis-driven