Senior Security & Detection Engineer - Threat Hunting

Integrity360; Johannesburg; Hybrid; ZAR 900,000 - 1,500,000; Full time

Job summary

Integrity360 is seeking a Principal Security & Detection Engineer to provide senior technical leadership across our Security Operations capability, focusing on detection engineering, security research, SOC automation, threat hunting, and the fraud monitoring platform.

The role combines hands-on security engineering, software development and automation with autonomy, ownership, and collaboration across cross‑functional teams to deliver repeatable, scalable security capabilities.

Qualifications

• Minimum 3 years of professional experience in cybersecurity, software development, or a combination of both with a strong security focus.
• Demonstrated experience developing software, automation or security tooling.
• Strong Python development capability.

Responsibilities

• Develop and maintain security detections across the technology stack.
• Execute hypothesis-driven threat hunts and translate attacker TTPs into practical detections.
• Map capabilities to MITRE ATT&CK and identify coverage gaps.
• Lead the development of the fraud and abuse monitoring platform.
• Design analytics, detection logic, and integrations to identify abuse patterns within business applications.
• Design and develop automation to improve SOC efficiency.
• Build automated enrichment, investigation, and response workflows (SOAR playbooks).
• Conduct independent research into emerging threats, vulnerabilities, and attack techniques.

Skills

Python development

Threat hunting

Security monitoring

SIEM

Security automation

Networking knowledge

Education

Relevant degree or diploma

Tools

SIEM platforms

EDR/XDR

SOAR tooling

Security integrations

Job description

Integrity360 is seeking a Principal Security & Detection Engineer to provide senior technical leadership across our Security Operations capability, focusing on detection engineering, security research, SOC automation, threat hunting, and the fraud monitoring platform.

The role combines hands-on security engineering, software development and automation with autonomy, ownership, and collaboration across cross‑functional teams to deliver repeatable, scalable security capabilities.