Cyber Security Incident Responder at Sasso Consulting, Johannesburg
Sasso Consulting · Johannesburg, Gauteng
Overview
Sasso Consulting is hiring 5 experienced Cyber Security Incident Responders in Johannesburg to tackle real threats in complex enterprise environments. If you have 3 to 5 years of hands on incident response experience and love investigating malware, ransomware and network intrusions, this is your chance to make a real impact in a permanent full time role. Bring your SIEM, EDR and digital forensics skills and join a team that values practical expertise.
About the role
Sasso Consulting is looking for 5 Cyber Security Incident Responders to join their team in Johannesburg. You will be at the frontline of defence, investigating, containing and resolving cybersecurity incidents within complex enterprise IT environments.
What you will be doing:
- Investigate and respond to threats like malware, ransomware, phishing and network intrusions
- Perform incident triage, containment, eradication and recovery
- Conduct digital forensic investigations and analyse security evidence
- Monitor and investigate threats using SIEM, EDR and XDR platforms
- Analyse security logs, network traffic and endpoint activity to identify compromised systems
- Develop incident response procedures and playbooks
- Prepare investigation reports, root cause analyses and remediation recommendations
- Collaborate closely with SOC, infrastructure and cybersecurity teams
Important application note: Practical incident response experience is essential. General IT support or basic SOC monitoring experience alone will not be sufficient. Only candidates with proven experience investigating and resolving real cybersecurity incidents should apply.
Requirements
- Relevant diploma or degree in IT, Cybersecurity, Computer Science or Information Security
- 3 to 5 years of hands on cybersecurity incident response experience
- Proven experience investigating and resolving real cybersecurity incidents
- Strong knowledge of SIEM, EDR and XDR technologies
- Experience with Microsoft Sentinel, Defender, Splunk, QRadar, CrowdStrike or similar tools
- Digital forensics experience across Windows, Linux and enterprise networks
- Understanding of MITRE ATT&CK, Active Directory and cloud security
- Experience with malware investigations, threat containment and recovery
- Certifications such as GCIH, GCFA, CompTIA Security+, CySA+, CEH or SC-200 advantageous
Responsibilities
- Investigate and respond to cybersecurity incidents including malware, ransomware, phishing and network intrusions
- Perform incident triage, containment, eradication and recovery
- Conduct digital forensic investigations and analyse security evidence
- Monitor and investigate threats using SIEM, EDR and XDR platforms
- Analyse security logs, network traffic and endpoint activity
- Identify compromised systems, suspicious activities and security vulnerabilities
- Develop incident response procedures and playbooks
- Prepare investigation reports, root cause analyses and remediation recommendations
- Collaborate with SOC, infrastructure and cybersecurity teams
Job details
- Organisation
- Sasso Consulting
- Location
- Johannesburg, Gauteng
- Job type
- Full time
- Experience level
- Mid (3+ years)
- Education
- Diploma
- Category
- IT & Software Development
- Application Method
- Apply manually
Success Guide
Hi there! This is a fantastic opportunity if you have solid hands on experience in cyber security incident response. Sasso Consulting is specifically looking for people who have dealt with real incidents, not just basic IT support or monitoring. Make sure your CV clearly shows the types of incidents you have investigated, the tools you used (like Sentinel, Splunk or CrowdStrike), and the outcomes you achieved. If you have certifications like GCIH or GCFA, highlight them. Also mention any digital forensics work across Windows and Linux. In your cover letter, be specific about a challenging incident you helped resolve. This role is in Johannesburg and is office based, so you should be comfortable working on site. Good luck, you have got this!
How we help you prepare
This employer takes applications on their own website, so you'll submit this one yourself — but SPAAN NOW gets everything ready for you first. Here's how it works:
- Our AI tailors your CV to match this job's keywords and requirements, so it stands out to recruiters and screening systems.
- A custom cover letter is written specifically for this role — no generic templates.
- We gather the documents this job needs: CV, Diploma certificate, Degree certificate and Matric certificate. SPAAN NOW pulls these from your profile and packages them together, ready to attach.
- Once your application is prepared, we show you exactly how and where to apply — just follow the link to the employer and submit your ready-made CV, cover letter and documents.
- Mark it as applied under Applications to keep track, and if you're shortlisted, use AI Interview Prep to practise questions commonly asked for roles like this.
We do the hard part — tailoring and gathering everything — so applying yourself only takes a minute.
Spaan Talk
Nobody has said anything yet. Be the first.