Security Operations Center (SOC) Analyst – Level 2

About the role

Xerox is looking for a Security Operations Center (SOC) Analyst at Level 2 to serve as a key line of defense for its information systems. The analyst will triage and investigate security alerts, correlate evidence across multiple telemetry sources, and drive timely resolution or escalation.

Key responsibilities

• Monitor security alerts and incidents, performing deeper analysis that requires cross‑source correlation.
• Conduct hypothesis‑driven investigations and make risk‑based decisions on monitoring versus containment.
• Execute pre‑approved response actions from playbooks, verify outcomes, and escalate exceptions to senior SOC or Incident Response teams.
• Produce investigation artifacts such as timelines, evidence, and query logs for peer review and audit.
• Provide structured feedback to detection engineering to improve detection rules and reduce false positives.
• Share investigation insights to strengthen the organization’s security posture and participate in security awareness activities.

Required profile

• Experience working in a SOC environment, preferably at an L2 level.
• Ability to independently validate AI‑assisted detection outputs against authoritative telemetry and established runbooks.
• Strong analytical mindset with a focus on hypothesis‑driven investigation and risk‑based decision making.
• Excellent documentation skills to produce clear investigation artifacts and escalation reports.

Required skills

What we offer

• Opportunity to work with cutting‑edge AI‑assisted security tools.
• Collaborative environment within Xerox Cyber Security (XCS).
• Professional growth through exposure to complex security incidents and continuous improvement initiatives.