GreyMatter Specialist

Why it’s worth it

At Relia Quest, we do things differently. We do not limit your professional growth with outdated job titles and responsibilities. As a Grey Matter Specialist, you will combine threat detection, engineering, and incident response skills. You’ll develop a diverse skill set normally taking years to learn—all within your first year—using our industry‑leading Grey Matter platform and immersive training. You’ll conduct advanced investigations, troubleshoot technical challenges, and provide customer recommendations, impacting right from day one.

• Be a trusted technical advisor, resolving customer challenges from start to finish.
• Provide analysis and recommendations to customers based on alert activity, response playbook availability, and investigations.
• Triage and fine‑tune security alerts, Digital Risk Protection (DRP) alerts, and engineering health alerts to ensure optimal performance.
• Integrate and configure log sources for existing customers.
• Troubleshoot and resolve issues related to data parsing and ingestion to ensure smooth operations and data accuracy.
• Independently integrate and configure log sources, handling both administrative tasks and ad‑hoc requests efficiently.
• Deploy and fine‑tune detection rules using Grey Matter Detect.
• Employ the Cyber Analysis Methodology to conduct investigations.
• Conduct advanced investigations, including Tier 3 incidents, ad‑hoc threat hunts, and customer‑requested analyses.
• Communicate effectively with customers regarding engineering and Incident Response escalations.
• Spend 75 % of your day in front of the customer.

• Bachelor’s degree in a related field.
• Understanding of cybersecurity and IT disciplines, including networking, operating systems, authentication protocols, enterprise network architecture, and security incident response.
• Knowledge of TCP/IP protocols, network analysis, and network/security applications.
• Basic knowledge of Linux/Unix operating systems.
• Ability to blend technical and communication skills to advise the customer.
• Strong attitude, energy, and effort.
• Adaptable, focused, accountable, and helpful.
• Excellent verbal and written communication skills in English.

• Certifications such as Network+, Security+, CySA+.
• 1–3 years’ experience as a Security/Network Administrator or equivalent knowledge.
• Prior SIEM experience and/or administration.
• Hands‑on experience with parsing data, log formats, and regular expressions.
• Scripting experience (bash, Power Shell, python).
• Multiple OS experience (macOS, Windows).
• Knowledge of various security methodologies and processes, and technical security solutions (SIEM, IDS/IPS, firewall, offensive security tools).