Cybersecurity Incident Response Specialist

Sasso Consulting (Pty) Ltd; Johannesburg; On-site; ZAR 550,000 - 850,000; Full time

Job summary

Sasso Consulting (Pty) Ltd is seeking experienced Cyber Security Incident Responders to identify, contain and recover from incidents across enterprise environments, protecting systems, networks and data.

Role requires hands-on incident response, digital forensics, security event analysis and threat investigation, including malware, ransomware and phishing, with strong collaboration with SOC and infrastructure teams.

Qualifications

• Diploma or degree in IT/CS/Cybersecurity required.
• 3–5 years hands-on incident response experience.
• Proficient with SIEM/EDR/XDR and forensic tools.

Responsibilities

• Identify and respond to cybersecurity incidents affecting enterprise systems.
• Contain, eradicate and recover from incidents; coordinate remediation.
• Conduct digital forensics and collect evidence.
• Analyse logs, network traffic and telemetry for IOC detection.
• Prepare incident investigation reports and timelines.

Skills

Cyber security

SIEM

EDR/XDR

Windows

Linux

Active Directory

Digital forensics

Threat hunting

Incident response

Education

Relevant diploma or degree in IT/CS/Cybersecurity

Tools

Autopsy

FTK

EnCase

Volatility

KAPE

Wireshark

Job description

Sasso Consulting (Pty) Ltd is seeking experienced Cyber Security Incident Responders to identify, contain and recover from incidents across enterprise environments, protecting systems, networks and data.

Role requires hands-on incident response, digital forensics, security event analysis and threat investigation, including malware, ransomware and phishing, with strong collaboration with SOC and infrastructure teams.