JOB 17 - Cyber Security Threat Hunter

Introduction

We are recruiting 5 experienced Cyber Security Threat Hunters to proactively identify, investigate and analyse sophisticated cyber threats within a complex enterprise IT environment.

The successful candidates must have proven hands-on experience in proactive threat hunting, advanced security investigations, threat intelligence and identifying threats that traditional security monitoring tools may not detect.

Duties & Responsibilities

Conduct proactive threat-hunting investigations across enterprise networks, endpoints, servers and cloud environments.

Develop and execute threat-hunting hypotheses using threat intelligence and attacker behaviour.

Analyse SIEM, EDR and XDR security data to identify suspicious activities and potential compromises.

Investigate advanced persistent threats, credential compromise, lateral movement and privilege escalation.

Identify indicators of compromise (IOCs) and attacker tactics, techniques and procedures (TTPs).

Apply the MITRE ATT&CK framework during investigations.

Analyse endpoint, network, identity and cloud security logs.

Investigate suspicious activity across Windows, Linux, Active Directory and cloud environments.

Identify security monitoring gaps and recommend improvements to detection capabilities.

Collaborate with SOC analysts, incident response teams and security engineers.

Prepare detailed threat-hunting reports and investigation findings.

Desired Experience & Qualification

Relevant Diploma or Degree in IT, Computer Science, Cybersecurity, Information Security or a related field.

3–5 years' relevant hands-on cybersecurity experience , including practical threat hunting or advanced security investigations.

Proven experience conducting proactive, hypothesis-driven threat hunting within enterprise environments.

Strong practical experience with SIEM platforms such as Microsoft Sentinel, Splunk or IBM QRadar.

Hands-on experience with EDR/XDR solutions such as Microsoft Defender, CrowdStrike or SentinelOne.

Strong understanding of MITRE ATT&CK, threat intelligence and attacker techniques.

Experience analysing security logs, endpoint telemetry and network traffic.

Knowledge of Active Directory, Windows, Linux and cloud security.

Experience with KQL, SPL, PowerShell or Python.

Strong analytical, investigative and problem-solving abilities.

Advantageous Certifications

CompTIA Security+ / CySA+

Microsoft SC-200

GIAC GCIH / GCIA / GCFA

CISSP / CEH

Relevant threat-hunting or digital forensics certifications.

Important: Candidates must demonstrate actual proactive threat-hunting experience. Traditional SOC monitoring or alert-handling experience alone will not be sufficient.

Package & Remuneration

Market-related salary, dependent on experience and qualifications.

5 positions available.

Employment terms and benefits to be confirmed.

Employment type: 3 Year contract, hybrid

Interested?

Sasso Consulting

Jackie Sasso

Campbell Road, Craigavon, Fourways

2191 Johannesburg

http://sassoconsulting.co.za