Cybersecurity Threat Hunter

Placements24; Stellenbosch; Hybrid; ZAR 540,000 - 840,000; Full time

Benefits offered by this job

Competitive salary

Performance bonuses

Medical aid

Pension fund

Paid time off

Hybrid work model

Professional growth

Job summary

Placements24 is seeking a proactive Cybersecurity Threat Hunter in Stellenbosch, Western Cape. The role sits in a modern SOC with hybrid work options, enabling collaboration from the Stellenbosch office while providing remote flexibility.

You will proactively hunt for threats, analyze logs and network data, and develop detection capabilities to neutralize sophisticated adversaries. The ideal candidate has 3–5 years in cybersecurity, strong scripting skills (Python/PowerShell/Bash), and

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or related field.
• 3-5 years of experience in cybersecurity roles (SOC, IR, or digital forensics).
• Proven threat hunting experience with large datasets (SIEM logs, PCAPs).
• Proficiency with scripting for data analysis (Python/PowerShell/Bash).
• Familiarity with MITRE ATT&CK and threat intelligence platforms.

Responsibilities

• Proactively search for signs of malicious activity across networks and systems using data sources and analytics.
• Develop and implement hypothesis-driven threat hunting methodologies.
• Analyze security logs, network traffic, and endpoint data to identify IOCs.
• Investigate anomalies, determine scope, impact and nature.
• Create custom detection rules, scripts, and queries to enhance detection.
• Stay current with threat intelligence, TTPs, and emerging attack vectors.
• Collaborate with incident response teams to provide context during investigations.
• Document findings and contribute to monitoring and response improvements.
• Automate repetitive threat hunting tasks with scripting and programming.
• Participate in red team exercises and tabletop simulations to test defenses.

Skills

Threat hunting

Analytical thinking

Strong communication

Scripting (Python/PowerShell/Bash)

Education

Bachelor's degree in Cybersecurity, Computer Science, or related field

Tools

EDR tools

MITRE ATT&CK framework

Job description

About the Role

Our client, a fast-paced technology innovator based in the picturesque region of Stellenbosch, Western Cape , is actively seeking a proactive and skilled Cybersecurity Threat Hunter. This role is integral to our client's advanced security operations center (SOC), tasked with proactively seeking out, analyzing, and neutralizing sophisticated cyber threats that may evade traditional security measures. The ideal candidate will possess a strong analytical mindset, deep knowledge of adversary tactics, techniques, and procedures (TTPs), and the ability to leverage advanced tools for in-depth investigation. This position offers a hybrid work model, fostering collaboration within the Stellenbosch office while providing remote flexibility.

Key Responsibilities

• Proactively search for signs of malicious activity within the organization's networks and systems using various data sources and analytical techniques.
• Develop and implement hypothesis-driven threat hunting methodologies.
• Analyze security logs, network traffic, and endpoint data to identify indicators of compromise (IOCs).
• Investigate suspicious activities and anomalies, determining their scope, impact, and nature.
• Develop custom detection rules, scripts, and queries to enhance threat detection capabilities.
• Stay current with the latest threat intelligence, adversary TTPs, and emerging attack vectors.
• Collaborate closely with incident response teams to provide context and support during investigations.
• Document findings, provide detailed reports, and contribute to the improvement of security monitoring and response strategies.
• Automate repetitive threat hunting tasks using scripting and programming languages.
• Participate in red team exercises and tabletop simulations to test and refine defense mechanisms.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, or a related field, or equivalent practical experience.
• 3-5 years of experience in cybersecurity roles, such as security operations, incident response, or digital forensics.
• Proven experience in threat hunting, analyzing large datasets (e.g., SIEM logs, network packet captures).
• Strong understanding of operating systems (Windows, Linux), network protocols, and common attack vectors.
• Proficiency in scripting languages like Python, PowerShell, or Bash for data analysis and automation.
• Familiarity with threat intelligence platforms and frameworks (e.g., MITRE ATT&CK).
• Excellent analytical and critical thinking skills, with a passion for uncovering hidden threats.
• Strong communication and collaboration skills, able to work effectively within a team.
• Experience with endpoint detection and response (EDR) tools.
• Relevant certifications (e.g., GCTI, GCFA, OSCP) are a plus.

Benefits

• Our client offers a competitive salary, performance bonuses, and a comprehensive benefits package including medical aid, pension fund, and ample paid time off.
• The hybrid work model provides flexibility and work-life balance.
• Opportunities for professional growth through advanced training, conferences, and certifications are readily available.
• Join a cutting-edge team in a beautiful setting in Stellenbosch, Western Cape , and play a vital role in protecting the organization from advanced cyber threats.
• Embrace a culture of continuous learning and innovation.