SOC Analyst II: AI-Driven Threat Investigator

Xerox Philippines; Philippines; On-site; PHP 600,000 - 800,000; Full time

Job summary

Xerox Philippines is seeking a skilled SOC Analyst Level 2 to monitor, investigate, and respond to security threats across endpoints, identities, networks and cloud services. You will leverage SIEM/EDR tools, perform hypothesis-driven analyses, and document investigations for peer review and audit.

The role emphasizes AI-assisted capabilities with rigorous validation against telemetry, and requires strong communication and collaboration across teams to maintain a secure posture in a fast-paced

Qualifications

• Bachelor's degree in computer science, Information Technology, or a related field.
• 2+ years of experience in a Security Operations Center, security monitoring, or incident triage/investigation role (Level 2 or equivalent).
• Proficiency investigating alerts using SIEM queries/pivots and one or more of the following: EDR/XDR, IAM/IdP telemetry, cloud audit logs, email security, network telemetry.
• Strong analytical and problem-solving skills; ability to conduct hypothesis-driven investigations and produce defensible conclusions.
• Strong written and verbal communication skills; ability to collaborate effectively across teams and produce case notes suitable for peer review and audit.

Responsibilities

• Monitor and triage security alerts and events using security tools and technologies (e.g., SIEM, EDR/XDR, IAM/IdP telemetry, email security, cloud audit logs).
• Investigate medium-to-complex alerts to determine scope, impact, and likely root cause; build defensible incident narratives grounded in evidence.
• Cross-source correlation and creation of timelines across endpoint, identity, network and cloud/SaaS telemetry to validate detections.
• Use hypothesis-driven investigation techniques and update conclusions as evidence changes.
• Make risk-based decisions aligned to runbooks; document rationale, confidence level, and next steps.
• Translate AI-assisted outputs into evidence-based explanations; document inconsistencies or missing context.
• Execute pre-approved response actions; verify outcomes and document success/failure states.
• Escalate cases with complete context when severity warrants senior involvement.
• Document investigations with queries, evidence, timeline, decisions, and handoff notes.

Skills

Experience in SOC

Analytical thinking

Communication skills

Fast-paced environment adaptability

Data handling discipline

Education

Bachelor's degree in CS/IT or related field

Tools

SIEM

EDR/XDR

IAM/IdP telemetry

Cloud audit logs

Email security

Job description

Xerox Philippines is seeking a skilled SOC Analyst Level 2 to monitor, investigate, and respond to security threats across endpoints, identities, networks and cloud services. You will leverage SIEM/EDR tools, perform hypothesis-driven analyses, and document investigations for peer review and audit.

The role emphasizes AI-assisted capabilities with rigorous validation against telemetry, and requires strong communication and collaboration across teams to maintain a secure posture in a fast-paced