Cyber Threat Hunter

Placements24; Gauteng; Hybrid; ZAR 600,000 - 1,000,000; Full time

Benefits offered by this job

Competitive salary

Hybrid work model

Medical aid and retirement fund

Job summary

Placements24 is seeking a proactive Cyber Threat Hunter to join the Pretoria-based SOC. You will hunt for sophisticated threats, develop detections, analyze logs and PCAP data, and coordinate with analysts and intel teams to strengthen defenses.

The role requires 3+ years in cybersecurity, expertise in SIEM/EDR, and scripting for automation. A hybrid work setup and ongoing professional development are offered.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, IT, or related field or equivalent practical experience.
• 3+ years in cybersecurity roles, preferably in SOC, IR, or threat intelligence.
• Experience in threat hunting, forensics, or malware analysis.
• Strong understanding of networks, OS (Windows/Linux), and common attack vectors.
• Proficient in security logs, network traffic, and endpoint data analysis.
• Experience with SIEM tools (Splunk, ELK) and EDR solutions.
• Scripting experience (Python/PowerShell) for automation.
• Familiarity with MITRE ATT&CK and threat intel platforms.
• Excellent analytical, critical thinking, and communication skills.
• Certs like GCTI, GREM, SANS are a plus.

Responsibilities

• Proactively hunt for advanced threats across networks and systems.
• Develop detection rules, analytics, and playbooks to identify malicious activity.
• Analyze large datasets to uncover indicators of compromise.
• Investigate security incidents and report findings.
• Collaborate with SOC analysts, IR, and intel teams to improve security.
• Stay updated on TTPs and threat actor techniques.
• Create scripts/tools to automate hunting processes.
• Document methodologies and recommendations for improvement.
• Participate in red team exercises and threat modeling.

Skills

Threat hunting

SIEM

EDR

Scripting (Python/PowerShell)

MITRE ATTACK

Analytical thinking

Communication skills

Education

Bachelor's in Cybersecurity or related

Tools

Splunk/ELK Stack

PCAP analysis tools

Threat intel platforms

Job description

About the Role

Our client, a rapidly expanding technology services provider in Pretoria, Gauteng , is looking for a proactive and skilled Cyber Threat Hunter to join their dedicated Security Operations Center (SOC). This role is crucial in proactively identifying and neutralizing sophisticated threats that may bypass existing security controls. As a Cyber Threat Hunter, you will leverage advanced analytical skills and cutting-edge tools to search for indicators of compromise (IOCs) and threat actor activities within the network. You will play a key role in enhancing our client's defensive capabilities by understanding attacker methodologies and developing innovative detection strategies. This is an exciting opportunity for a curious and persistent individual to make a significant impact in safeguarding critical digital assets.

Key Responsibilities

• Proactively search for advanced threats within the organization's network and systems using threat intelligence, data analysis, and hypothesis-driven techniques.
• Develop and implement new detection rules, analytics, and playbooks to identify malicious activities.
• Analyze large datasets (logs, network traffic, endpoint data) to uncover subtle indicators of compromise and suspicious behaviors.
• Investigate potential security incidents, determine scope and impact, and provide detailed reports to the security team.
• Collaborate closely with SOC analysts, incident responders, and intelligence teams to share findings and improve overall security posture.
• Research and stay current on the latest threat actor tactics, techniques, and procedures (TTPs).
• Develop custom scripts and tools to automate threat hunting processes and data analysis.
• Document hunting methodologies, findings, and recommendations for continuous improvement.
• Participate in red team exercises and threat modeling activities to simulate attacks and validate defenses.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience.
• 3+ years of experience in cybersecurity roles, preferably within a SOC, incident response, or threat intelligence capacity.
• Demonstrated experience in threat hunting, digital forensics, or malware analysis.
• Strong understanding of network protocols, operating systems (Windows, Linux), and common attack vectors.
• Proficiency in analyzing security logs, network traffic (PCAP), and endpoint data.
• Experience with SIEM tools (e.g., Splunk, ELK Stack) and EDR solutions is essential.
• Skilled in at least one scripting language (e.g., Python, PowerShell) for automation and data analysis.
• Familiarity with threat intelligence platforms and frameworks (e.g., MITRE ATT&CK).
• Excellent analytical, critical thinking, and problem-solving abilities.
• Strong communication skills, both written and verbal.
• Relevant certifications like GCTI, GREM, or SANS courses are a plus.

Benefits

• Our client provides a competitive salary, a comprehensive benefits package including medical aid and retirement fund contributions, and a dynamic work environment.
• This hybrid role offers the flexibility to balance office-based collaboration with remote work.
• You will have access to advanced security tools and technologies, opportunities for continuous learning and professional development, and the chance to work alongside a team of highly skilled cybersecurity professionals.
• Benefits include performance bonuses, generous leave policies, and a commitment to employee well-being and career advancement within the exciting field of cybersecurity.