Commvault

Security Operations

• Investigate security alerts using tools such as CrowdStrike Falcon Suite, Microsoft Sentinel, endpoint telemetry, identity logs, network data, and cloud security sources.
• Perform alert triage and analysis to determine the scope, severity, and potential impact of security events.
• Support incident response activities, including investigation, containment, remediation, recovery, and post-incident documentation.
• Participate in rotational on-call escalation coverage for higher-priority security events outside normal business hours, as needed.
• Write clear incident reports, investigation summaries, timelines, findings, and recommended improvements.
• Support selected SOC projects focused on improving detection quality, workflows, playbooks, reporting, automation, and response readiness.
• Participate in regular security operations reviews and collaborate with cross-functional teams, including Security Engineering, Threat and Vulnerability Management, Networking, Infrastructure, Identity, and IT Operations.

Security Operations Analyst