Senior Threat Hunter

Placements24; East London; Hybrid; ZAR 700,000 - 1,100,000; Full time

Benefits offered by this job

Hybrid work model

Health insurance

Retirement annuity

Employee assistance program

Bonuses

Job summary

Placements24 is seeking a Senior Threat Hunter in East London, Eastern Cape, to proactively identify sophisticated threats and develop hunting methodologies. You will analyze endpoint data, IoCs, and network indicators while collaborating with SOC and IR teams.

The ideal candidate has 5+ years in cybersecurity, strong scripting skills (Python/PowerShell), SIEM experience, and knowledge of MITRE ATT&CK. Hybrid work model and ongoing professional development are offered.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or related field.
• 5+ years of cybersecurity experience focusing on threat hunting or incident response.
• Proficiency with endpoint data analysis (EDR logs, process execution, FS activity).
• Strong knowledge of network protocols and security concepts.
• Experience with Python or PowerShell for data analysis/automation.
• Familiarity with SIEM tools and log analysis techniques.
• Knowledge of MITRE ATT&CK framework and threat intelligence concepts.
• Excellent problem-solving and collaboration skills.

Responsibilities

• Develop and test advanced threat hunting hypotheses and strategies.
• Search for APTs and sophisticated malware within networks and endpoints.
• Analyze large security data sets to detect IoCs and anomalies.
• Create custom tools, scripts, and queries for hunting activities.
• Collaborate with SOC and IR teams to contain threats.
• Document findings, IoCs, and methodologies from hunts.

Skills

Threat hunting

Incident response

Endpoint data analysis

Python

PowerShell

SIEM

MITRE ATT&CK

Analytical thinking

Collaboration

Education

Bachelor's degree in Cybersecurity

Bachelor's degree in Computer Science

Tools

SIEM tools

Threat intelligence platforms

Job description

About the Role Our client, a prominent e-commerce platform operating in East London, Eastern Cape, is seeking a highly skilled Senior Threat Hunter. This role is designed for an experienced cybersecurity professional who excels at proactively identifying sophisticated threats that evade traditional security defenses. You will be instrumental in developing advanced hunting methodologies, analyzing complex data sets, and collaborating with incident response teams to neutralize emerging threats before they cause significant impact. This is a challenging and rewarding role for a detective-minded individual within a dynamic digital environment.

Key Responsibilities

• Develop and execute advanced threat hunting hypotheses and strategies.
• Proactively search for advanced persistent threats (APTs) and sophisticated malware within the network and systems.
• Analyze large volumes of security data (logs, network traffic, endpoint data) to detect anomalies and Indicators of Compromise (IoCs).
• Develop custom tools, scripts, and queries to facilitate threat hunting activities.
• Collaborate closely with the Security Operations Center (SOC) and Incident Response (IR) teams.
• Document findings, methodologies, and IoCs discovered during threat hunts.
• Provide intelligence on threat actor TTPs (Tactics, Techniques, and Procedures) to improve defenses.
• Stay abreast of the latest threat intelligence, attack vectors, and adversary behaviors.
• Contribute to the improvement of security monitoring and detection capabilities.
• Mentor junior analysts and share threat hunting expertise within the security team.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, or a related field, or equivalent practical experience.
• 5+ years of experience in cybersecurity, with a strong focus on threat hunting, incident response, or advanced malware analysis.
• Proficiency in analyzing endpoint data (e.g., EDR logs, process execution, file system activity).
• Strong understanding of network protocols, packet analysis, and network security concepts.
• Experience with scripting languages (e.g., Python, PowerShell) for data analysis and automation.
• Familiarity with SIEM tools and log analysis techniques.
• Knowledge of threat intelligence platforms and frameworks (e.g., MITRE ATT&CK).
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong communication and collaboration abilities.
• Relevant certifications such as GIAC GCTI, GCFA, or equivalent are highly desirable.

Benefits

• Competitive annual salary of R .
• Comprehensive health, dental, and vision insurance plans.
• Generous paid time off and holidays.
• Opportunities for advanced training and professional certifications.
• Hybrid work model offering flexibility and work-life balance.
• Be part of a cutting-edge cybersecurity team in East London, Eastern Cape.
• Contribution to a retirement annuity fund.
• Employee assistance program.
• Performance-based bonuses.