Security Operations Analyst (Remote - USA East)

We’ve learned that scammers are impersonating Commvault team members—including HR and leadership—via email or text. These bad actors may conduct fake interviews and ask for personal information, such as your social security number.  

• Commvault does not conduct interviews by email or text.
• We will never ask you to submit sensitive documents (including banking information, SSN, etc) before your first day.

If you suspect a recruiting scam, please contact us at wwrecruitingteam@commvault.com 

Commvault (NASDAQ: CVLT) is the gold standard in cyber resilience. The company empowers customers to uncover, take action, and rapidly recover from cyberattacks – keeping data safe and businesses resilient. The company’s unique AI-powered platform combines best-in-class data protection, exceptional data security, advanced data intelligence, and lightning-fast recovery across any workload or cloud at the lowest TCO. For over 25 years, more than 100,000 organizations and a vast partner ecosystem have relied on Commvault to reduce risks, improve governance, and do more with data. 

Commvault is seeking a Security Operations Analyst to join our Cybersecurity team to help support our Security Operations capabilities. This role is ideal for a hands-on SOC professional who can investigate security alerts, coordinate incident response activities, and contribute to operational improvement efforts across a complex enterprise environment.

The Security Operations Analyst will work closely with teams including Security Engineering, Threat and Vulnerability Management, Networking, Infrastructure, Identity, and IT Operations.

• →Investigate security alerts using tools such as CrowdStrike Falcon Suite, Microsoft Sentinel, endpoint telemetry, identity logs, network data, and cloud security sources.
• →Perform alert triage and analysis to determine the scope, severity, and potential impact of security events.
• →Support incident response activities, including investigation, containment, remediation, recovery, and post-incident documentation.
• →Participate in rotational on-call escalation coverage for higher-priority security events outside normal business hours, as needed.
• →Write clear incident reports, investigation summaries, timelines, findings, and recommended improvements.
• →Support selected SOC projects focused on improving detection quality, workflows, playbooks, reporting, automation, and response readiness.
• →Participate in regular security operations reviews and collaborate with cross-functional teams, including Security Engineering, Threat and Vulnerability Management, Networking, Infrastructure, Identity, and IT Operations.

• 2-4 years of cybersecurity experience, including hands-on SOC experience.
• Experience investigating security alerts, performing triage, documenting findings, and supporting incident response.
• Hands-on experience with CrowdStrike Falcon Suite.
• Experience with Microsoft Sentinel or similar SIEM technology.
• Experience supporting hybrid Active Directory and Microsoft Entra ID environments.
• Understanding of common attack techniques, including phishing, credential compromise, malware execution, lateral movement, privilege escalation, and data exfiltration.
• Ability to analyze endpoint, identity, network, cloud, and SIEM telemetry to determine scope, severity, and business impact.
• Strong written and verbal communication skills, including the ability to brief technical findings and drive follow-up across teams.

• Security+, GIAC certifications, or other relevant cybersecurity credentials.
• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.
• Experience with threat hunting, detection engineering, malware analysis, or digital forensics.
• Familiarity with KQL, PowerShell, Python, MITRE ATT&CK, or incident response frameworks.
• Experience improving SOC processes, playbooks, metrics, or detection and response workflows.

• Continuous professional development and training
• Clear career growth and advancement opportunities
• Inclusive company culture
• Comprehensive benefits package

#LI-PK1

#LI-Remote