Cybersecurity Threat Hunter

Placements24; Queenstown; On-site; NZD 90,000 - 120,000; Full time

Benefits offered by this job

Competitive salary

Annual bonus

Medical, dental, and optical coverage

Pension fund contribution

Training and certification sponsorship

Generous annual leave

Job summary

Placements24 is seeking a proactive Cybersecurity Threat Hunter to join our client’s SOC in Queenstown. You will proactively identify advanced cyber threats, develop hypothesis-driven hunting, and collaborate with incident response teams to strengthen defenses.

You will analyze SIEM/EDR data, investigate incidents, and implement custom detection rules while staying current with attacker TTPs. Strong scripting, GCFA/GCIH/CTHA credentials are advantageous.

Qualifications

• Bachelor's degree or equivalent practical experience in cybersecurity or related field.
• Minimum 4 years in cybersecurity with threat hunting, incident response or SOC analysis.
• Experience with EDR, SIEM, packet analysis and memory forensics.
• Proficiency in scripting (Python, PowerShell, Bash).
• Strong knowledge of Windows and Linux OS and network security concepts.
• Certs like GCFA, GCIH, or CTHA are a plus.

Responsibilities

• Proactively hunt for APTs and advanced adversaries in networks and systems.
• Develop hypothesis-driven threat hunting using threat intel and forensics data.
• Analyze SIEM/EDR data and network logs to detect anomalies and IOCs.
• Investigate incidents, identify root causes, and document findings.
• Create custom detection rules, scripts, and tools to improve hunting.
• Collaborate with SOC and IR to enrich threat intelligence and playbooks.
• Stay updated on latest threat actor TTPs, malware, and attack vectors.
• Document methodologies and recommendations for improvement.
• Participate in red team exercises and tabletop scenarios.
• Communicate complex findings to technical and non-technical stakeholders.

Skills

Threat hunting

Incident response

SOC analysis

Python

PowerShell

Bash

Analytical skills

Independent work

Education

Bachelor's degree in Cybersecurity/CS

Tools

EDR

SIEM

Packet analysis

Memory forensics

Job description

About the Role

Our client, a rapidly growing fintech company, is seeking a proactive and highly analytical Cybersecurity Threat Hunter to join their established security operations center in Queenstown, Eastern Cape. This critical role is designed for an individual with a passion for proactively identifying and neutralizing advanced cyber threats before they impact the organization. You will be at the forefront of threat intelligence, utilizing cutting-edge tools and methodologies to uncover sophisticated attack patterns that evade traditional security defenses. This position requires a deep understanding of attacker tactics, techniques, and procedures (TTPs), combined with exceptional investigative skills. You will work closely with incident response and security engineering teams to strengthen our defenses based on your findings. This is an excellent opportunity to contribute significantly to the security posture of a key player in the Eastern Cape's technology sector.

Key Responsibilities

• Proactively search for and identify advanced persistent threats (APTs) and sophisticated adversaries within the network and systems.
• Develop and execute hypothesis-driven threat hunting methodologies using threat intelligence and forensic data.
• Analyze large datasets from various security tools (SIEM, EDR, network logs) to detect anomalies and indicators of compromise (IOCs).
• Investigate potential security incidents, identify root causes, and provide detailed reports.
• Develop custom detection rules, scripts, and tools to enhance threat hunting capabilities.
• Collaborate with the Security Operations Center (SOC) and Incident Response teams to enrich threat intelligence and improve incident response playbooks.
• Stay current with the latest threat actor TTPs, malware, and attack vectors.
• Document hunting methodologies, findings, and recommendations for continuous improvement.
• Participate in red team exercises and tabletop simulations to test defensive controls.
• Communicate complex technical findings clearly and concisely to both technical and non-technical stakeholders.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, or a related field, or equivalent practical experience.
• Minimum of 4 years of experience in cybersecurity, with a strong focus on threat hunting, incident response, or SOC analysis.
• Demonstrated experience with various threat hunting tools and techniques (e.g., EDR, SIEM, packet analysis, memory forensics).
• In-depth knowledge of attacker methodologies, malware analysis, and network protocols.
• Proficiency in scripting languages such as Python, PowerShell, or Bash for automation and analysis.
• Strong understanding of operating systems (Windows, Linux) and network security concepts.
• Excellent analytical and problem-solving skills with a keen eye for detail.
• Ability to work independently and manage multiple investigative threads simultaneously.
• Relevant certifications like GIAC Certified Forensic Analyst (GCFA), GIAC Certified Incident Handler (GCIH), or Certified Threat Hunting Analyst (CTHA) are a significant advantage.
• Experience with threat intelligence platforms (TIPs) and frameworks (e.g., MITRE ATT&CK).

Benefits

• Competitive salary and annual bonus structure.
• Comprehensive medical, dental, and optical coverage.
• Pension fund contribution.
• Opportunities for advanced training and certification sponsorship.
• Generous annual leave allowance.
• Access to state-of-the-art security tools and technologies.
• Professional growth and career advancement within a growing organization.
• Team-based projects and knowledge-sharing sessions.
• Regular performance reviews and feedback.
• A dynamic and challenging work environment in Queenstown.