Why it s worth it: At ReliaQuest, we do things differently. We do not limit your professional growth with outdated job titles and responsibilities. Why be just a Security Analyst, Detection Developer, or Security Engineer when you can be all threeAs a GreyMatter Specialist, you will do all of that and more. This role is uniquely designed to combine skills of threat detection, engineering, and incident response. On our team, we give you the opportunity to make an impact starting from day one. In this role, you ll develop a diverse skill set which normally takes years to learn all within your first year. Our industry-leading security operations platform, GreyMatter and immersive training will afford you the tools, experience, and opportunities to grow your career. Whether you re conducting advanced investigations, troubleshooting technical challenges or providing customer recommendations, you ll be solving real-world challenges and driving impact daily for our enterprise customers. As part of the ReliaQuest team, you will receive mentorship and hands-on experiences while working alongside world-class teammates who share a high-performance mindset. In this environment, your expertise will propel you years ahead of your peers limited to traditional SOC roles. If you are looking for the monotony of manually working security alerts, this job is not for you; but if you are ready to be challenged, we are ready to invest in you. The everyday hustle: Be a trusted technical advisor, resolving customer challenges from start to finish. Provide analysis and recommendations to customers based on alert activity, response playbook availability, and investigations. Triage and fine-tune security alerts, Digital Risk Protection (DRP) alerts, and engineering health alerts to ensure optimal performance. Integrate and configure log sources for existing customers. Troubleshoot and resolve issues related to data parsing and ingestion to ensure smooth operations and data accuracy. Independently integrate and configure log sources, handling both administrative tasks and ad hoc requests to complete work efficiently. Deploy and fine-tune detection rules using GreyMatter Detect. Employ the Cyber Analysis Methodology to conduct investigations. Conduct advanced investigations, including Tier 3 incidents, ad-hoc threat hunts, and customer-requested analyses. Communicate effectively with customers regarding engineering and Incident Response (IR) escalations. Spend 75% of your day in front of the customer Do you have what it takes Bachelors degree in a related field Understanding of cybersecurity and IT disciplines including networking, operating systems, authentication protocols, general enterprise network, architecture, and security incident response. Knowledge of TCP/IP Protocols, network analysis, and network/security applications Basic knowledge of Linux/Unix operating systems Ability to blend your technical and communication skills to advise the customer Must demonstrate great attitude, energy, and effort Must be adaptable, focused, accountable, and helpful Must demonstrate excellent verbal and written communication skills (English language) What makes you uncommon(not required) Certifications such as Network+, Security+, CySA+ 1-3 years experience as a Security/Network Administrator or equivalent knowledge Prior SIEM experience and/or administration Hands-on experience with parsing data, log formats, regular expressions Scripting experience (bash, PowerShell, python) Multiple OS experience (mac, windows) Knowledge of various security methodologies and processes, and technical security solutions (SIEM, IDS/IPS, Firewall Solutions, Offensive Security tools)

Why it s worth it: Qualified candidates will work closely with cross-functional teams that turn data into critical information and knowledge that can be used to make sound business decisions and business processes. They will gain an in-depth understanding of the cybersecurity business environment and will be responsible for the maintenance and health of tools that ingest data generated by a diverse set of platforms. This position will support our software developers, database architects, analytics engineers, business analysts and data scientists on data initiatives and will ensure optimal data delivery is consistent throughout ongoing projects . This position will also be responsible for data integration between in-house and commercial applications within the environment. The everyday hustle : Ability to work with multiple developer teams Complex SQL Query development including performance tuning in Snowflake, Postgres, and SQL Server Environments Develop in Python using object-oriented approach to efficiently create jobs to ingest raw data, transform, and create application integrations Ingest raw data using Python with Snowflake, Postgres, MySQL, Elasticsearch, SQL Server, API, and various other sources and destinations Create models in dbt (Data Build Tools) Creation and optimization of tables, indexes, stored procedures, views, and functions in Snowflake, Postgres, and SQL Server Creation of Argo CRON Workflows for job orchestration Contribute to multiple GitLab Repositories Basic GitLab CI/CD changes and modifications Work with docker containers for development and modify existing Dockerfiles Work with internal tools that are deployed on Kubernetes (EKS) Pods Responsible for the design, development, implementation and maintenance of S nowflake and Postgres databases Develop and interpret database models Identify , design, and implement internal process improvements: automating manual processes, optimizing data delivery, re-designing infrastructure for greater scalability, etc. May work after hours to complete business objectives if required Do you have what it takes 2-4 years of Snowflake, Postgres, MSSQL or related Database Development and/or DBA experience Bachelors degree in Computer Science or related discipline preferred Experience using Snowflake and/or other cloud-based databases / data stores preferred Excellent written and oral communication skills including an ability to communicate with internal and external cross functional teams (technical and business) Great Attitude, Energy, and Effort

The Platform Engineer position will be part of the team that is accountable for providing support to the platform by working with internal and external users. The Platform Engineer will be engaged with all teams at ReliaQuest to continuously improve end-user experience and mature GreyMatter holistically. This position reports to the Director of Platform Enablement. The everyday hustle: Provide advanced troubleshooting support for GM capabilities (eg Detect, Investigate, Respond) and integrations (eg Google Chronicle, Crowdstrike, Microsoft Products). Tune and optimize GreyMatter integrations to improve performance and reliability (this occurs at both the global and customer level) Proficient in crafting API requests for testing and navigating internal/vendor documentation. Handle high impact/technical customer escalations when it comes to the GreyMatter platform. Triage and confirm user submitted bug reports. This includes extending the initial report to provide actionable context and examples for internal development teams to resolve. Provide production level context for platform/connector issues that we're not caught in testing. Join production war room calls to assist with triage, support, and recovery of critical issues. Proactively Investigate failures across the platform and escalate them where appropriate for review Submit monitoring requests to product owners to deepen visibility around GM features for health and stability. Work with Development teams to correctly test solutions to handle bug requests in staging. Do You Have What It Takes: Requires close collaboration with Product Management, Technical Operations, and Development teams to identify unusual issues with GM capabilities and connectors. A strong troubleshooting mindset, attention to detail, and effective communication to cross functional teams will be crucial for success in this role.