Hybrid Lead Detection Engineer (SIEM, SOAR & Telemetry)

Ronin Dynamics Pty Ltd; Sydney; Hybrid; AUD 140,000 - 230,000; Full time

Job summary

Ronin Dynamics Pty Ltd is seeking a Lead Detection Engineer to head detection engineering, security automation and telemetry health across a hybrid SOC. You will guide the senior technical voice in moving to an automated, agentic SOC and report to the SOC Manager.

You will lead rule tuning, SOAR workflow design, and ensure continuous coverage of log pipelines while collaborating with managed providers. Strong Python, API orchestration, and GCDA/GCTI/GCSA certifications are valued.

Qualifications

• Extensive cyber security experience in a large enterprise environment.
• Deep hands-on expertise across detection engineering, SOAR, SIEM and EDR.
• Experience with API integrations and log pipeline health.

Responsibilities

• Lead detection engineering and rule tuning aligned to MITRE ATT&CK.
• Design and refine SOAR workflows and automated incident response playbooks.
• Monitor, baseline and audit log pipelines to avoid blind spots.
• Build API integrations and telemetry connectors across security stack.
• Translate threat intel into proactive hunts and agentic SOC workflows.
• Act as technical quality lead for managed provider and drive detections improvements.
• Lead root cause analysis, threat modeling and post-incident improvements.

Skills

Cyber security

Detection engineering

SOAR

SIEM

EDR

Threat intelligence

Python

API orchestration

Tools

API integrations

Job description

Ronin Dynamics Pty Ltd is seeking a Lead Detection Engineer to head detection engineering, security automation and telemetry health across a hybrid SOC. You will guide the senior technical voice in moving to an automated, agentic SOC and report to the SOC Manager.

You will lead rule tuning, SOAR workflow design, and ensure continuous coverage of log pipelines while collaborating with managed providers. Strong Python, API orchestration, and GCDA/GCTI/GCSA certifications are valued.