Cyber Defence Tech Lead: Detection, Automation & Intel

Head Office - Sydney; Sydney; On-site; AUD 180,000 - 280,000; Full time

Benefits offered by this job

Competitive remuneration

Professional development opportunities

Employee benefits and Ramsay Rewards

Job summary

Ramsay Health Care seeks a senior Cyber Defence Technical Lead to drive detection engineering, automation and intelligence across a large healthcare hybrid SOC. This hands-on leadership role shapes automated detection, integrates security technologies and enhances telemetry health to protect patient data.

You will lead incident response playbooks, collaborate with MSSPs and internal teams, and translate threat intelligence into effective detection and response capabilities in a regulated

Qualifications

• Extensive cybersecurity experience within a large enterprise environment.
• Strong hands-on experience across detection engineering, SIEM, EDR and SOAR platforms.
• Experience developing automated incident response workflows and API integrations.
• Knowledge of data parsing, telemetry pipelines and security monitoring.
• Familiarity with MITRE ATT&CK and threat modelling.

Responsibilities

• Lead detection engineering, rule development and tuning aligned to MITRE ATT&CK.
• Design, develop and refine automated incident response playbooks and SOAR workflows.
• Monitor log ingestion pipelines to maintain telemetry health and visibility.
• Build and manage API integrations across security tech stack.
• Operationalise threat intelligence to support proactive threat hunting and SOC workflows.
• Lead root cause analysis and post-incident engineering improvements.
• Collaborate with internal teams and external partners to improve security platforms.

Skills

Detection engineering

SIEM

EDR

SOAR

APIs

Threat intelligence

MSSP/MSP collaboration

Education

Cybersecurity degree

Tools

SOAR platforms

Job description

Ramsay Health Care seeks a senior Cyber Defence Technical Lead to drive detection engineering, automation and intelligence across a large healthcare hybrid SOC. This hands-on leadership role shapes automated detection, integrates security technologies and enhances telemetry health to protect patient data.

You will lead incident response playbooks, collaborate with MSSPs and internal teams, and translate threat intelligence into effective detection and response capabilities in a regulated