Proactive Cyber Threat Hunter: Endpoint & Cloud

Sasso Consulting (Pty) Ltd; Johannesburg; On-site; ZAR 900,000 - 1,300,000; Full time

Job summary

Sasso Consulting (Pty) Ltd in Centurion, Gauteng invites applications for a Cyber Security Threat Hunter with hands-on experience in proactive threat hunting, advanced investigations and threat intelligence across endpoints, networks and cloud. You will develop hunting hypotheses, analyze telemetry and collaborate with SOC teams to improve detections.

Ideal candidates have 3–5 years of relevant experience, strong knowledge of MITRE ATT&CK, SIEM/EDR/XDR platforms, and a proven ability to

Qualifications

• Minimum 3–5 years of hands-on cybersecurity threat hunting and investigations.
• Proven ability to develop threat-hunting hypotheses using threat intel and risk context.
• Strong knowledge of attacker TTPs and MITRE ATT&CK framework.
• Experience with SIEM, EDR or XDR technologies and log data analysis.
• Familiarity with cloud environments (Azure, AWS) and identity security.

Responsibilities

• Proactively hunt threats across endpoints, networks, servers and cloud environments.
• Analyse telemetry to identify indicators of compromise and attacker activity.
• Investigate credential compromise, privilege escalation and lateral movement.
• Develop and test structured threat-hunting hypotheses and detection rules.
• Collaborate with SOC, IR and detection engineers to improve monitoring.
• Document methodologies, findings and recommended remediation steps.

Skills

Threat hunting

Security investigations

MITRE ATT&CK

Threat intelligence

Endpoint analysis

Telemetry analysis

Cloud security

KQL / SPL

Education

Diploma or degree in IT / Cybersecurity

Information Security/Forensics

Tools

Microsoft Defender for Endpoint

Microsoft Defender XDR

CrowdStrike Falcon

SentinelOne

Palo Alto Cortex XDR

VMware Carbon Black

SIEM / XDR platforms

Job description

Sasso Consulting (Pty) Ltd in Centurion, Gauteng invites applications for a Cyber Security Threat Hunter with hands-on experience in proactive threat hunting, advanced investigations and threat intelligence across endpoints, networks and cloud. You will develop hunting hypotheses, analyze telemetry and collaborate with SOC teams to improve detections.

Ideal candidates have 3–5 years of relevant experience, strong knowledge of MITRE ATT&CK, SIEM/EDR/XDR platforms, and a proven ability to