GreyMatter Specialist

Role overview

ReliaQuest is looking for a GreyMatter Specialist to take on a blended security role that goes beyond a traditional SOC position. This opportunity combines threat detection, engineering, and incident response work, giving you broad exposure from the very beginning. The company emphasizes early impact, continuous learning, and hands-on development through its GreyMatter platform and internal training.

In this position, you will build skills that usually take years to develop, with the chance to work on advanced investigations, technical troubleshooting, and customer guidance within your first year. You’ll be supported by experienced teammates and mentorship while solving meaningful security problems for enterprise clients. The role is designed for someone who wants challenge, variety, and a fast-growth environment rather than repetitive alert handling.

What you will do

• Act as a dependable technical partner who can take customer issues from initial investigation through resolution.
• Review alert activity, available response playbooks, and investigation findings to provide practical guidance and recommendations.
• Handle, tune, and prioritize security alerts, DRP alerts, and engineering health alerts so the platform runs effectively.
• Set up and configure log sources for existing customers.
• Investigate and fix problems tied to data parsing and ingestion to keep data accurate and operations smooth.
• Independently manage log-source integrations along with related administrative and ad hoc tasks.
• Deploy and optimize detection rules through GreyMatter Detect.
• Use the Cyber Analysis Methodology to carry out investigations.
• Perform advanced investigative work, including Tier 3 incidents, ad-hoc threat hunts, and analyses requested by customers.
• Communicate clearly with customers about engineering escalations and incident response matters.
• Spend most of the workday, around 75%, directly in customer-facing interactions.

What we are looking for

• A bachelor’s degree in a relevant discipline.
• Solid understanding of cybersecurity and IT fundamentals, including networking, operating systems, authentication, enterprise network architecture, and incident response.
• Working knowledge of TCP/IP, network analysis, and network/security tools and applications.
• Basic familiarity with Linux or Unix environments.
• Strong customer-facing communication skills, with the ability to explain technical issues clearly and advise effectively.
• A positive attitude, strong energy, and a consistent willingness to put in the effort.
• Someone who is adaptable, focused, accountable, and supportive.
• Excellent spoken and written English.

Preferred background

• Certifications such as Network+, Security+, or CySA+.
• 1 to 3 years of experience as a Security Administrator, Network Administrator, or in a comparable role.
• Previous experience working with SIEM platforms, including administration work.
• Practical exposure to parsing data, log formats, and regular expressions.
• Scripting experience in bash, PowerShell, or Python.
• Experience across multiple operating systems such as macOS and Windows.
• Familiarity with security methods, processes, and technologies such as SIEM, IDS/IPS, firewall solutions, and offensive security tools.

Additional information

This role is based in Dublin, County Dublin, Ireland and is a full-time onsite position. It is intended for candidates who want a broad security career path and enjoy solving complex customer and platform challenges. The position is not suited to anyone looking for repetitive manual alert processing.