Security Operations Analyst

🔥 15 hours ago

Apply Now
Find Similar Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Logo of Commvault

Commvault

1001 - 5000 employees

Founded 1996

🔒 Cybersecurity

💰 Series A on 2000-03

Cybersecurity • Cloud Services • Data Management

Commvault is a company that specializes in data protection and management solutions. They offer a comprehensive cloud platform that ensures data security across enterprise, cloud, and SaaS environments. Their services include backup and recovery, disaster recovery, continuous data security, and compliance solutions, catering to various industries such as healthcare, finance, and federal government. Commvault also integrates advanced technologies like AI for enhanced cyber resilience, helping organizations recover swiftly from cyber threats and maintain continuous business operations.

📋 Description

• Investigate security alerts using tools such as CrowdStrike Falcon Suite, Microsoft Sentinel, endpoint telemetry, identity logs, network data, and cloud security sources. • Perform alert triage and analysis to determine the scope, severity, and potential impact of security events. • Support incident response activities, including investigation, containment, remediation, recovery, and post-incident documentation. • Participate in rotational on-call escalation coverage for higher-priority security events outside normal business hours, as needed. • Write clear incident reports, investigation summaries, timelines, findings, and recommended improvements. • Support selected SOC projects focused on improving detection quality, workflows, playbooks, reporting, automation, and response readiness. • Participate in regular security operations reviews and collaborate with cross-functional teams, including Security Engineering, Threat and Vulnerability Management, Networking, Infrastructure, Identity, and IT Operations.

🎯 Requirements

• 2-4 years of cybersecurity experience, including hands-on SOC experience. • Experience investigating security alerts, performing triage, documenting findings, and supporting incident response. • Hands-on experience with CrowdStrike Falcon Suite. • Experience with Microsoft Sentinel or similar SIEM technology. • Experience supporting hybrid Active Directory and Microsoft Entra ID environments. • Understanding of common attack techniques, including phishing, credential compromise, malware execution, lateral movement, privilege escalation, and data exfiltration. • Ability to analyze endpoint, identity, network, cloud, and SIEM telemetry to determine scope, severity, and business impact. • Strong written and verbal communication skills, including the ability to brief technical findings and drive follow-up across teams.

🏖️ Benefits

• Continuous professional development and training • Clear career growth and advancement opportunities • Inclusive company culture • Comprehensive benefits package

Apply Now

Similar Jobs

🕒 5 days ago

Optiv

1001 - 5000

Cyber Operations Manager managing client relationships and service delivery at Optiv's Security Operations Center. Supporting operational excellence and driving security solutions across various domains.

🕒 June 26

Apogee Engineering, LLC

501 - 1000

🚀 Aerospace

🔒 Cybersecurity

C2 Ops/Cyber Security SME providing contractor site reachback support for M-Code Aviation Receivers Joint Program Office. Responsible for expert-level analysis and development of cyber resiliency solutions.

🕒 June 25

Yellow Card App

51 - 200

💳 Fintech

💸 Finance

Security Operations Engineer leading SOC operations and cloud security posture management for a fintech enabling stablecoin transactions. Engaging in detection engineering and incident response within a fully remote setup.

🕒 June 24

Veeam Software

1001 - 5000

☁️ SaaS

🔒 Cybersecurity

🏢 Enterprise

Cyber-Security Operations Analyst at Veeam Software enhancing secure software delivery infrastructure across development environments and collaborating with various teams.

🕒 June 23

Twilio

5001 - 10000

Global Security Operations Center Operator monitoring physical security and safety across Twilio’s global footprint. Responding to incidents and ensuring employee safety through surveillance and operations support.