Cyber Threat Hunter: Proactive Security Investigator

Sasso Consulting; Centurion; On-site; ZAR 900,000 - 1,300,000; Full time

Job summary

Sasso Consulting is seeking experienced Cyber Security Threat Hunters to proactively identify and investigate threats across complex enterprise environments. You will hunt for advanced adversaries, develop hypothesis-driven investigations, and collaborate with SOC and incident response teams.

The role requires hands-on experience with SIEM/EDR/XDR, threat intelligence, and cloud/environmental risk assessment, and offers exposure to modern security monitoring practices in a dynamic setting.

Qualifications

• Diploma or degree in IT, CS, cybersecurity or related field.
• Typically 3–5 years hands-on experience in cybersecurity operations.
• Proven experience conducting proactive threat-hunting investigations.
• Strong understanding of attacker TTPs.
• Experience with SIEM/EDR/XDR platforms.
• Familiarity with MITRE ATT&CK.
• Windows and Linux operating systems knowledge.
• Experience with cloud security investigations is advantageous.

Responsibilities

• Conduct proactive threat-hunting across enterprise networks, endpoints, servers, apps and cloud.
• Identify suspicious behaviours and potential compromises not triggered by alerts.
• Develop and execute threat-hunting hypotheses based on threat intel and risk.
• Analyse endpoint, network, identity and cloud telemetry for indicators of compromise.
• Investigate advanced threats, credential compromise, lateral movement and unauthorised access.

Skills

Threat hunting

Threat intel

MITRE ATT&CK

Incident response

Analytical thinking

Education

Bachelor's degree or diploma in IT / Cybersecurity

Tools

SIEM

EDR

XDR

KQL

SPL

Job description

Sasso Consulting is seeking experienced Cyber Security Threat Hunters to proactively identify and investigate threats across complex enterprise environments. You will hunt for advanced adversaries, develop hypothesis-driven investigations, and collaborate with SOC and incident response teams.

The role requires hands-on experience with SIEM/EDR/XDR, threat intelligence, and cloud/environmental risk assessment, and offers exposure to modern security monitoring practices in a dynamic setting.