About this Security Operations Analyst (Remote - USA East) role at Commvault
Recruitment Fraud Alert
We’ve learned that scammers are impersonating Commvault team members—including HR and leadership—via email or text. These bad actors may conduct fake interviews and ask for personal information, such as your social security number.
What to know:
- Commvault does not conduct interviews by email or text.
- We will never ask you to submit sensitive documents (including banking information, SSN, etc) before your first day.
If you suspect a recruiting scam, please contact us at wwrecruitingteam@commvault.com
About Commvault
Commvault (NASDAQ: CVLT) is the gold standard in cyber resilience. The company empowers customers to uncover, take action, and rapidly recover from cyberattacks – keeping data safe and businesses resilient. The company’s unique AI-powered platform combines best-in-class data protection, exceptional data security, advanced data intelligence, and lightning-fast recovery across any workload or cloud at the lowest TCO. For over 25 years, more than 100,000 organizations and a vast partner ecosystem have relied on Commvault to reduce risks, improve governance, and do more with data.
The Opportunity
Commvault is seeking a Security Operations Analyst to join our Cybersecurity team to help support our Security Operations capabilities. This role is ideal for a hands-on SOC professional who can investigate security alerts, coordinate incident response activities, and contribute to operational improvement efforts across a complex enterprise environment.
The Security Operations Analyst will work closely with teams including Security Engineering, Threat and Vulnerability Management, Networking, Infrastructure, Identity, and IT Operations.
What You'll Do...
- Investigate security alerts using tools such as CrowdStrike Falcon Suite, Microsoft Sentinel, endpoint telemetry, identity logs, network data, and cloud security sources.
- Perform alert triage and analysis to determine the scope, severity, and potential impact of security events.
- Support incident response activities, including investigation, containment, remediation, recovery, and post-incident documentation.
- Participate in rotational on-call escalation coverage for higher-priority security events outside normal business hours, as needed.
- Write clear incident reports, investigation summaries, timelines, findings, and recommended improvements.
- Support selected SOC projects focused on improving detection quality, workflows, playbooks, reporting, automation, and response readiness.
- Participate in regular security operations reviews and collaborate with cross-functional teams, including Security Engineering, Threat and Vulnerability Management, Networking, Infrastructure, Identity, and IT Operations.
Who You Are...
- 2-4 years of cybersecurity experience, including hands-on SOC experience.
- Experience investigating security alerts, performing triage, documenting findings, and supporting incident response.
- Hands-on experience with CrowdStrike Falcon Suite.
- Experience with Microsoft Sentinel or similar SIEM technology.
- Experience supporting hybrid Active Directory and Microsoft Entra ID environments.
- Understanding of common attack techniques, including phishing, credential compromise, malware execution, lateral movement, privilege escalation, and data exfiltration.
- Ability to analyze endpoint, identity, network, cloud, and SIEM telemetry to determine scope, severity, and business impact.
- Strong written and verbal communication skills, including the ability to brief technical findings and drive follow-up across teams.
Preferred Qualifications
- Security+, GIAC certifications, or other relevant cybersecurity credentials.
- Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.
- Experience with threat hunting, detection engineering, malware analysis, or digital forensics.
- Familiarity with KQL, PowerShell, Python, MITRE ATT&CK, or incident response frameworks.
- Experience improving SOC processes, playbooks, metrics, or detection and response workflows.
You'll Love Working Here Because...
- Continuous professional development and training
- Clear career growth and advancement opportunities
- Inclusive company culture
- Comprehensive benefits package
#LI-PK1
#LI-Remote
Thank you for your interest in Commvault. Reflected below is the minimum and maximum base salary range for this role. At Commvault we use broad salary ranges in our job postings to reflect the diverse levels of expertise and experience among our candidates and is not reflective of the total compensation and benefits package. The specific salary offered will be determined based on your unique qualifications, including your relevant experience, skills, and the value you bring to the role. While the range provides a general idea of the compensation, it is important to note that placements within the range are not automatic and will be carefully considered to ensure a fair and competitive offer. We are committed to rewarding talent and experience.
Commvault is an equal opportunity workplace and is an affirmative action employer. We are always committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status and we will not discriminate against on the basis of such characteristics or any other status protected by the laws or regulations in the locations where we work.
Commvault’s goal is to make interviewing inclusive and accessible to all candidates and employees. If you have a disability or special need that requires accommodation to participate in the interview process or apply for a position at Commvault, please email accommodations@commvault.com For any inquiries not related to an accommodation please reach out to wwrecruitingteam@commvault.com.
