Cybersecurity Engineer - Threat Detection

Placements24; Durban; Hybrid; ZAR 900,000 - 1,300,000; Full time

Benefits offered by this job

Stock options

Medical, dental, vision insurance

Retirement plan

Professional development budgets

Paid time off

Job summary

Placements24 is seeking an experienced Cybersecurity Engineer specializing in Threat Detection. The role focuses on designing and implementing advanced threat detection, responding swiftly to security incidents, and staying ahead of evolving threats in a remote-first setting.

You will join a global security team dedicated to protecting cloud platforms and enterprise networks. The ideal candidate has 5+ years in cybersecurity, strong SIEM/EDR expertise, and deep knowledge of MITRE ATT&CK, cloud

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, or related field, or equivalent experience.
• 5+ years of experience in cybersecurity engineering, threat detection and incident response.
• Proficiency with SIEM platforms (e.g., Splunk, QRadar), EDR solutions, and network security tools.
• Experience analyzing network traffic, logs, and malware behaviors.
• Scripting with Python, Bash, or PowerShell for automation.
• Knowledge of MITRE ATT&CK and cloud security (AWS/Azure/GCP).
• Ability to conduct advanced threat hunting and forensics.
• Strong problem solving and remote collaboration skills.

Responsibilities

• Design, build, and maintain threat detection systems using SIEM, EDR, and security tools.
• Analyze alerts to identify threats and incidents.
• Develop detection methodologies from threat intel.
• Perform forensic analysis and incident response activities.
• Automate security workflows to improve response times.
• Collaborate with threat intel teams to integrate IOCs.
• Maintain documentation for tools and playbooks.
• Conduct regular threat hunting exercises.
• Stay updated on cyber threats and defense strategies.
• Provide guidance on security best practices to teams.

Skills

SIEM platforms

EDR solutions

Network security

Python scripting

PowerShell

MITRE ATT&CK

Cloud security

Threat hunting

Education

Bachelor's degree in Cybersecurity or CS

Tools

Splunk

QRadar

Job description

About the Role

Our client, a pioneer in cloud security solutions, is actively seeking a highly skilled and experienced Cybersecurity Engineer specializing in Threat Detection to join their fully remote team. This position is critical to our client's mission of protecting businesses from sophisticated cyber threats. You will be responsible for designing, developing, and implementing advanced threat detection mechanisms and responding to security incidents with speed and precision. This role requires a deep understanding of current threat landscapes, security technologies, and incident response protocols. As a remote-first employee, you'll leverage cutting-edge tools and collaborate with a global team of security experts. We are looking for a proactive individual who can thrive in a fast-paced, innovative environment, contributing to the security of our client's cutting-edge platforms, ideally located within Durban, KwaZulu-Natal, ZA, or any other suitable remote location.

Key Responsibilities

• Design, build, and maintain threat detection systems and rules using SIEM, EDR, and other security technologies.
• Analyze security alerts and events to identify and investigate potential threats and compromises.
• Develop and refine detection methodologies based on emerging threat intelligence.
• Perform forensic analysis and incident response activities for security breaches.
• Automate security processes and workflows to improve efficiency and response times.
• Collaborate with threat intelligence teams to integrate new indicators of compromise (IOCs) into detection systems.
• Develop and maintain documentation for security tools, processes, and incident response playbooks.
• Conduct regular threat hunting exercises to proactively uncover hidden threats.
• Stay current with the latest cybersecurity threats, attack vectors, and defense strategies.
• Provide expert guidance on security best practices to engineering and operations teams.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, or a related field, or equivalent experience.
• 5+ years of experience in cybersecurity engineering, focusing on threat detection and incident response.
• Strong proficiency with SIEM platforms (e.g., Splunk, QRadar), EDR solutions, and network security tools.
• Expertise in analyzing network traffic, system logs, and malware behavior.
• Experience with scripting languages such as Python, Bash, or PowerShell for automation.
• In-depth knowledge of common attack frameworks (e.g., MITRE ATT&CK) and adversary tactics.
• Understanding of cloud security principles (AWS, Azure, GCP) and their respective security services.
• Ability to conduct advanced threat hunting and forensic investigations.
• Excellent problem-solving, analytical, and critical thinking skills.
• Strong communication skills and the ability to work effectively in a remote, global team.

Benefits

• Our client offers a highly competitive salary, performance bonuses, and stock options.
• Comprehensive benefits include medical, dental, and vision insurance, a generous retirement plan, and life insurance.
• Professional development is strongly encouraged, with budgets for training, certifications, and conferences.
• This is a fully remote position, offering unparalleled flexibility.
• You will be part of an innovative and collaborative team, working on challenging security problems.
• Our client provides a stimulating work environment and opportunities for career advancement.
• Paid time off, including vacation, personal days, and holidays, is generous.
• We are committed to fostering a diverse and inclusive culture.