JOB 13 - Cyber Security Incident Responder
Sasso Consulting · Johannesburg, Gauteng
Posted 10 October 2026
Stop applying one at a time.
JobAlertsZA auto-applies to South African jobs like this one for you, overnight. Upload your CV once — we do the applying.
Start free — we apply for you →Introduction
We are recruiting 5 experienced Cyber Security Incident Responders to investigate, contain and resolve cybersecurity incidents within complex enterprise IT environments.
The ideal candidates will have strong hands-on experience in incident response, digital forensics, threat investigation and enterprise security technologies.
Duties & Responsibilities
Investigate and respond to cybersecurity incidents, including malware, ransomware, phishing and network intrusions.
Perform incident triage, containment, eradication and recovery.
Conduct digital forensic investigations and analyse security evidence.
Monitor and investigate threats using SIEM, EDR and XDR platforms.
Analyse security logs, network traffic and endpoint activity.
Identify compromised systems, suspicious activities and security vulnerabilities.
Develop incident response procedures and playbooks.
Prepare investigation reports, root cause analyses and remediation recommendations.
Collaborate with SOC, infrastructure and cybersecurity teams.
Desired Experience & Qualification
Relevant diploma or degree in IT, Cybersecurity, Computer Science or Information Security.
3–5 years' hands-on cybersecurity incident response experience.
Important: Practical incident response experience is essential. General IT support or basic SOC monitoring experience alone will not be sufficient.
Proven experience investigating and resolving real cybersecurity incidents.
Strong knowledge of SIEM, EDR and XDR technologies.
Experience with Microsoft Sentinel, Defender, Splunk, QRadar, CrowdStrike or similar tools.
Digital forensics experience across Windows, Linux and enterprise networks.
Understanding of MITRE ATT&CK, Active Directory and cloud security.
Experience with malware investigations, threat containment and recovery.
Certifications such as GCIH, GCFA, CompTIA Security+, CySA+, CEH or SC-200 advantageous.
Package & Remuneration
Market-related salary, dependent on experience and qualifications.
5 positions available.
Employment terms and benefits to be confirmed.
Employment type: 3 Year contract, hybrid
Interested?
Sasso Consulting
Jackie Sasso
Campbell Road, Craigavon, Fourways
2191 Johannesburg
http://sassoconsulting.co.za