Proactive Cyber Threat Hunter | Advanced Security Investigator

Sasso Consulting (Pty) Ltd; Johannesburg; On-site; ZAR 900,000 - 1,300,000; Full time

Job summary

Sasso Consulting (Pty) Ltd is seeking experienced Cyber Security Threat Hunters to proactively identify and analyse sophisticated threats across enterprise environments from Centurion. You will develop threat-hunting hypotheses, investigate ad hoc threats and collaborate with SOC and incident response teams.

The role focuses on endpoint, network, cloud and identity threat hunting, with emphasis on improving detection capabilities, leveraging SIEM/EDR/XDR platforms and applying MITRE ATT&CK

Qualifications

• Diploma or degree in Information Technology, Cybersecurity or related discipline.
• 3–5 years of hands-on cybersecurity experience (threat hunting, incident response or related).
• Proven experience conducting proactive threat-hunting investigations in enterprise environments.
• Strong understanding of attacker tactics, techniques and procedures (TTPs).
• Experience with SIEM, EDR or XDR platforms.
• Familiarity with Windows and Linux security event data.
• Cloud security investigations experience is advantageous.

Responsibilities

• Conduct proactive threat-hunting across enterprise networks, endpoints, servers, applications and cloud environments.
• Analyse telemetry to identify indicators of compromise and attacker activity.
• Develop hypotheses based on threat intelligence and environmental risk.
• Investigate credential compromise, privilege escalation and lateral movement.
• Collaborate with SOC, IR teams and security engineers to improve detections.
• Document hunting methodologies and findings to support remediation and improvements to controls.
• Maintain detailed investigation records and ensure evidence integrity.

Skills

Threat hunting

Threat intelligence

Incident response

MITRE ATT&CK

Analytical thinking

Collaboration

Education

Relevant IT/Cybersecurity degree

Tools

SIEM

EDR

XDR

PowerShell

KQL

SPL

Job description

Sasso Consulting (Pty) Ltd is seeking experienced Cyber Security Threat Hunters to proactively identify and analyse sophisticated threats across enterprise environments from Centurion. You will develop threat-hunting hypotheses, investigate ad hoc threats and collaborate with SOC and incident response teams.

The role focuses on endpoint, network, cloud and identity threat hunting, with emphasis on improving detection capabilities, leveraging SIEM/EDR/XDR platforms and applying MITRE ATT&CK