GreyMatter Specialist

Why it’s worth it

• At ReliaQuest, we do things differently. We do not limit your professional growth with outdated
• job titles and responsibilities. Why be just a “Security Analyst”, “Detection Developer”
• , or “Security Engineer” when you can be all three? As a GreyMatter Specialist, you will do all of
• that and more. This role is uniquely designed to combine skills of threat detection, engineering,
• and incident response. On our team, we give you the opportunity to make an impact starting
• from day one.
• In this role, you’ll develop a diverse skill set which normally takes years to learn—all within your
• first year. Our industry-leading security operations platform, GreyMatter and immersive training
• will afford you the tools, experience, and opportunities to grow your career. Whether you’re
• conducting advanced investigations, troubleshooting technical challenges or providing customer
• recommendations, you’ll be solving real-world challenges and driving impact daily for our
• enterprise customers.
• As part of the ReliaQuest team, you will receive mentorship and hands-on experiences while
• working alongside world-class teammates who share a high-performance mindset. In this
• environment, your expertise will propel you years ahead of your peers limited to traditional SOC
• roles. If you are looking for the monotony of manually working security alerts, this job is not for
• you; but if you are ready to be challenged, we are ready to invest in you.

The everyday hustle

• Be a trusted technical advisor, resolving customer challenges from start to finish.
• Provide analysis and recommendations to customers based on alert activity, response

playbook availability, and investigations.

• Triage and fine-tune security alerts, Digital Risk Protection (DRP) alerts, and engineering

health alerts to ensure optimal performance.

• Integrate and configure log sources for existing customers.
• Troubleshoot and resolve issues related to data parsing and ingestion to ensure smooth

operations and data accuracy.

• Independently integrate and configure log sources, handling both administrative tasks and

ad hoc requests to complete work efficiently.

• Deploy and fine-tune detection rules using GreyMatter Detect.
• Employ the Cyber Analysis Methodology to conduct investigations.
• Conduct advanced investigations, including Tier 3 incidents, ad-hoc threat hunts, and

customer-requested analyses.

• Communicate effectively with customers regarding engineering and Incident Response

(IR) escalations.

• Spend 75% of your day in front of the customer

Do you have what it takes?

• Bachelor's degree in a related field
• Understanding of cybersecurity and IT disciplines including networking, operating systems,

• authentication protocols, general enterprise network, architecture, and security incident
• response.

• Knowledge of TCP/IP Protocols, network analysis, and network/security applications
• Basic knowledge of Linux/Unix operating systems
• Ability to blend your technical and communication skills to advise the customer
• Must demonstrate great attitude, energy, and effort
• Must be adaptable, focused, accountable, and helpful
• Must demonstrate excellent verbal and written communication skills (English language)

What makes you uncommon? (not required)

• Certifications such as Network+, Security+, CySA+
• 1-3 years' experience as a Security/Network Administrator or equivalent knowledge
• Prior SIEM experience and/or administration
• Hands-on experience with parsing data, log formats, regular expressions
• Scripting experience (bash, PowerShell, python)
• Multiple OS experience (mac, windows)
• Knowledge of various security methodologies and processes, and technical security

solutions (SIEM, IDS/IPS, Firewall Solutions, Offensive Security tools)