Cybersecurity Analyst
Quick Summary
Greylock Systems is hiring an entry-level to early-career Cybersecurity Analyst to help protect our applications, networks, and customer data. Reporting to the Security Operations Lead, you will triage alerts, investigate incidents, fine-tune detections, and assist in hardening our cloud environment. The ideal candidate is detail-oriented, eager to learn, and comfortable collaborating across engineering, IT, and compliance in a remote-first setting.
Role Snapshot
Project Category or Industry: Information security for cloud-native SaaS
Type: Full-time employment
Experience Level: Entry to mid; strong consideration for recent graduates and career changers with relevant training
Duration: Ongoing
Location: Remote within North America; core collaboration hours 10:00–16:00 ET with flexible scheduling outside this window
Salary: USD 64,000–78,000 base, depending on experience, plus annual performance bonus, equity eligibility, and comprehensive benefits (medical, dental, vision, 401(k) match, and paid training budget)
Payment Mode: Monthly payroll via direct deposit
Hiring Company Name: Greylock Systems
Required Skills or Tools
Candidates should be comfortable describing basic attack vectors and defensive controls, writing clear incident notes, and using an enterprise SIEM. Exposure to cloud security concepts (especially in AWS), endpoint protection, identity management, and ticketing workflows is important. Familiarity with Python or PowerShell for light automation is welcome but not mandatory.
Job Details
Project Description
You will join our 24×5 security operations function focused on prevention, detection, and response across a multi-account AWS footprint and a modern SaaS stack. The role exists to reduce risk by improving signal quality, accelerating investigations, and partnering with product teams to embed secure practices earlier in the development lifecycle.
Core Responsibilities and Expected Deliverables
Monitor SIEM dashboards and threat intel feeds, triage events, and escalate as needed with clear, reproducible notes.
Perform first-line incident response, including containment actions on endpoints, account lockouts, and guardrail adjustments in AWS.
Assist with detection engineering: create and tune rules, write playbooks, and document runbooks that shorten mean time to detect and recover.
Support vulnerability management by coordinating scan results, validating findings, and tracking remediation in partnership with IT and engineering.
Participate in periodic tabletop exercises and after-action reviews; produce concise post-incident reports and metrics.
Contribute to security awareness by drafting short, practical guidance for internal teams.
Required Experience and Preferred Qualifications
Foundational knowledge of networking, operating systems (Windows, macOS, Linux), and common security frameworks such as NIST CSF or ISO 27001.
Practical exposure from internships, labs, bootcamps, home labs, or university projects is valued; 0–2 years of hands-on experience is ideal, though more experienced analysts are encouraged to apply.
CompTIA Security+, CySA+, or AWS Cloud Practitioner are preferred but not required; we sponsor relevant certifications within the first year.
Strong written communication and professional curiosity; ability to explain complex issues in plain language.
Tools or Platforms to Be Used
SIEM and log management (Splunk or similar), EDR (CrowdStrike or similar), email security gateway, and identity management (Okta).
Cloud security tooling for AWS, including GuardDuty, Config, CloudTrail, and Security Hub.
Ticketing and collaboration via Jira, Slack, and Confluence; version control in GitHub for detection content and playbooks.
Scripting for light automation using Python or PowerShell.
Language Requirement
English is required; Spanish or French is a plus for supporting a wider customer base.
Communication Style
Day-to-day collaboration in Slack; incident bridges and weekly touchpoints on Zoom; formal changes and decisions tracked in Jira and Confluence; email reserved for external or executive updates.
Time Commitment or Working Window
Expected 38–42 hours per week, with optional on-call rotation once fully onboarded. Core collaboration hours align to Eastern Time, with flexibility to accommodate Pacific and Central Time schedules.
Payment Terms
Salaried position with monthly payroll. Annual performance review determines bonus and merit adjustments. Certification bonuses available for pre-approved credentials.
Evaluation Criteria
Applications will be assessed on clarity of incident write-ups or lab reports, understanding of basic security concepts, problem-solving approach during a practical scenario, communication skills, and cultural add. Shortlisted candidates complete a 45-minute technical screen and a brief, take-home log analysis exercise.
Other Requirements
Employment contingent on background check. NDA and acceptable use policy required. Time-tracking in our HRIS for compliance and training credits. Occasional overlap with late-afternoon ET for incident reviews.
About Greylock Systems
Greylock Systems is a privately held SaaS company providing workflow automation tools for mid-market operations teams across North America. Headquartered in Denver, we operate a remote-first workforce with a strong emphasis on privacy, reliability, and customer trust. Our mission is to make critical operations simpler and safer through secure, thoughtfully designed software.
To learn more, visit https://www.greylocksystems.com or contact talent@greylocksystems.com. We welcome applications from recent graduates, veterans, and career changers with demonstrable passion for security.