Senior Cybersecurity Threat Hunter

Placements24; Benoni; Hybrid; ZAR 900,000 - 1,500,000; Full time

Benefits offered by this job

Hybrid work model

Health/dental/vision insurance

Pension plan

Job summary

Placements24 is seeking a highly skilled Senior Cybersecurity Threat Hunter to join our advanced security operations team in Benoni, Gauteng. You will proactively search for threats that bypassed controls, leveraging MITRE ATT&CK, TTPs and data analytics to uncover stealthy activity across networks and endpoints.

You will design hunting campaigns, analyze SIEM/EDR logs, collaborate with SOC and incident response, mentor junior analysts, and develop playbooks.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field or equivalent professional experience.
• 5+ years of experience in cybersecurity with threat hunting, incident response or advanced security analytics.
• Proven experience in hypothesis-driven threat hunts and understanding of attacker TTPs.

Responsibilities

• Design and execute proactive threat hunting campaigns based on threat intelligence and anomaly detection.
• Analyze SIEM/EDR and network logs to identify indicators of compromise and sophisticated threats.
• Develop and refine detection techniques and queries to uncover APTs and stealthy attacks.
• Collaborate with SOC, IR, and threat intelligence teams to share findings and improve defenses.
• Develop and maintain documentation for threat hunting methodologies and playbooks.
• Automate repetitive hunting tasks using Python or similar scripting languages.
• Stay current with threat actor TTPs, attack vectors, and security technologies.
• Mentor junior threat hunters and analysts.

Skills

Threat hunting

Incident response

SQL

KQL

Python

MITRE ATT&CK

Data analysis

SOC collaboration

Education

Bachelor’s degree in Computer Science / Cybersecurity / IT

Equivalent professional experience

Tools

SIEM

EDR

Log management

Network analysis tools

Job description

About the Role

Our client is seeking a highly skilled and experienced Senior Cybersecurity Threat Hunter to join their advanced security operations team. This role is critical in proactively searching for and identifying sophisticated cyber threats that may have bypassed existing security controls. You will leverage your deep understanding of attacker tactics, techniques, and procedures (TTPs), along with cutting-edge tools and data analysis techniques, to uncover hidden malicious activities within the organization's networks and systems. This is an exceptional opportunity for a proactive security professional to contribute significantly to the defense of a major organization in Benoni, Gauteng, with a hybrid work model.

Key Responsibilities

• Design and execute proactive threat hunting campaigns based on threat intelligence, hypothesis generation, and anomaly detection.
• Analyze large datasets from various security tools (SIEM, EDR, network logs) to identify indicators of compromise (IOCs) and sophisticated threats.
• Develop and refine advanced detection techniques and custom queries to uncover advanced persistent threats (APTs) and other stealthy attacks.
• Collaborate closely with the Security Operations Center (SOC), incident response, and threat intelligence teams to share findings and enhance defensive strategies.
• Develop and maintain documentation for threat hunting methodologies, playbooks, and findings.
• Automate repetitive hunting tasks using scripting languages (e.g., Python).
• Stay current with the latest threat actor TTPs, emerging attack vectors, and security technologies.
• Provide expert insights and recommendations to improve the overall security posture and detection capabilities.
• Mentor junior threat hunters and analysts.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent professional experience.
• Minimum of 5 years of experience in cybersecurity, with a significant focus on threat hunting, incident response, or advanced security analytics.
• Proven experience in developing and executing hypothesis-driven threat hunts.
• Deep understanding of attacker TTPs, frameworks like MITRE ATT&CK, and cyber kill chain concepts.
• Proficiency with SIEM, EDR, network analysis tools, and log management platforms.
• Strong skills in data analysis and querying languages (e.g., SQL, KQL).
• Proficiency in scripting languages such as Python for automation and analysis.
• Excellent analytical, critical thinking, and problem-solving skills.
• Strong communication and collaboration abilities, with the capacity to clearly articulate complex technical findings.
• Relevant certifications like GCFA, GCTI, OSCP, or CISSP are a strong plus.
• Ability to work effectively in a hybrid setting in Benoni, Gauteng.

Benefits

• Highly competitive annual salary.
• Comprehensive health, dental, and vision insurance.
• Retirement savings plan with generous company contributions.
• Generous paid time off and sick leave policy.
• Opportunities for continuous professional development, training, and certifications.
• Supportive team environment with access to cutting-edge security tools.
• Hybrid work model promoting work-life balance.