Cybersecurity Threat Hunter

Placements24; Centurion; Hybrid; ZAR 800,000 - 1,100,000; Full time

Benefits offered by this job

Performance bonuses

Remote setup

Health coverage

Retirement match

Dev budget

Flexible hours

Job summary

Placements24 is seeking a proactive Cybersecurity Threat Hunter for a fintech client based in Centurion, Gauteng. This remote-first role focuses on detecting undetected threats, leveraging threat intel, and conducting forensic analysis to strengthen the security posture.

Ideal candidates have 5+ years in cybersecurity, with 2–3 years in threat hunting, and strong skills in Python/PowerShell/Bash, plus experience with EDR tools and SIEM platforms.

Qualifications

• Minimum 5 years of cybersecurity experience.
• 2–3 years focused on threat hunting, IR, or advanced threat analysis.
• Proven experience with EDR tools and SIEM platforms.
• Strong scripting in Python, PowerShell, or Bash.
• Relevant certifications (GCTI, GCFA, GREM, SANS GIAC) are advantageous.

Responsibilities

• Develop and execute proactive threat hunting methodologies.
• Analyze large datasets from endpoint logs, network traffic, and alerts.
• Investigate incidents and perform forensic analysis when needed.
• Use threat intelligence to inform hunting strategies and prioritization.
• Create custom detection rules, scripts, and tools.
• Collaborate with SOC and IR teams to validate findings and remediate.
• Document findings, methodologies, and recommendations.
• Stay current with TTPs and present insights to security leadership.
• Contribute to threat intelligence program in Gauteng.

Skills

Python

PowerShell

Bash

EDR tools

SIEM

Education

Bachelor's degree in Cybersecurity/CS/IT

Master's degree (plus)

Tools

CrowdStrike

Carbon Black

SentinelOne

Splunk

ELK Stack

Job description

Our client, a rapidly expanding fintech company based in Centurion, Gauteng , is looking for a proactive and highly skilled Cybersecurity Threat Hunter. This role is crucial for identifying and mitigating advanced persistent threats (APTs) and sophisticated adversaries that may evade traditional security measures. You will be responsible for proactively searching for undetected threats within the client's network and systems, leveraging threat intelligence, advanced analytics, and a deep understanding of attacker methodologies. This is a remote-first position, offering flexibility and the opportunity to contribute from anywhere. The ideal candidate possesses a strong investigative mindset, exceptional analytical skills, and extensive experience in malware analysis, network traffic analysis, and host-based forensics. You will play a key role in enhancing the client's overall security posture by uncovering hidden threats before they can cause significant damage. Join a cutting-edge team focused on staying ahead of the curve in the ever-evolving threat landscape, working remotely to protect a leading organization in Centurion .

Key Responsibilities

• Develop and execute proactive threat hunting methodologies and hypotheses to uncover advanced threats.


• Analyze large datasets from various sources, including endpoint logs, network traffic, and security alerts, to identify suspicious activities.


• Investigate potential security incidents and anomalies, performing in-depth forensic analysis when necessary.


• Utilize threat intelligence feeds and research to inform hunting strategies and prioritize threats.


• Develop custom detection rules, scripts, and tools to enhance threat hunting capabilities.


• Collaborate with the Security Operations Center (SOC) and incident response teams to validate findings and facilitate remediation.


• Document hunting findings, methodologies, and recommendations for continuous improvement.


• Stay current with the latest threat actor tactics, techniques, and procedures (TTPs).


• Present findings and insights to security leadership and relevant stakeholders.


• Contribute to the development and refinement of the client's threat intelligence program in Gauteng.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field; Master's degree is a plus.


• Minimum of 5 years of experience in cybersecurity, with at least 2-3 years focused specifically on threat hunting, incident response, or advanced threat analysis.


• Demonstrated experience with endpoint detection and response (EDR) tools (e.g., CrowdStrike, Carbon Black, SentinelOne).


• Strong understanding of network protocols, forensic analysis, malware analysis, and reverse engineering techniques.


• Proficiency in scripting and programming languages such as Python, PowerShell, or Bash.


• Experience with data analysis tools and techniques, including SIEM platforms (e.g., Splunk, ELK Stack).


• Excellent analytical, critical thinking, and problem-solving skills.


• Ability to work independently and manage multiple priorities in a remote setting.


• Strong communication and collaboration skills, with the ability to convey technical information clearly.


• Relevant certifications such as GCTI, GCFA, GREM, or SANS GIAC certifications are highly advantageous for this role in Centurion.

Benefits

• Highly competitive salary and potential for performance bonuses.


• Comprehensive remote work setup and support.


• Generous health, dental, and vision insurance plans.


• 401(k) or equivalent retirement savings plan with employer match.


• Unlimited paid time off and flexible working hours.


• Budget for professional development, training, and conferences.


• Opportunity to work with cutting-edge security technologies.


• Direct impact on the security posture of a growing fintech leader.


• Supportive and collaborative remote team culture.


• Regular virtual team-building activities and social events in the Centurion region.