search Browse Jobs
Cyber Defence Technical LeadRamsay Health Care · St Leonards, New South Wales, Australia
Ramsay Health Care logo

Ramsay Health Care

company page ↗

Cyber Defence Technical Lead

🗓️ Posted 2026-09-14 St Leonards, New South Wales, Australia Full-time Hybrid ICT
💰 Salary Not shared 📊 Market A$11,670–A$15,830/mo

About the Company

Ramsay Health Care is seeking an experienced Cyber Defence Technical Lead to play a key role in protecting our digital environment, systems and patient data. Reporting to the Cyber Operations Manager, this hands-on technical role will lead cyber incident response, proactive threat hunting and the ongoing maturity of Ramsay's hybrid Security Operations Centre (SOC). Acting as the technical 2IC, you will be the key technical investigator during security incidents while also providing technical oversight of our Managed Security Service Provider (MSSP). This is an opportunity to combine deep technical expertise with genuine influence across a large and complex healthcare environment. Founded in Australia in 1964, Ramsay Health Care is the nation's largest private hospital operator and a recognised global leader in healthcare delivery. Across Australia, Ramsay operates 76 hospitals and 12 surgical centres, caring for more than 1.1 million patients each year with the support of over 30,000 dedicated professionals. Guided by our ethos, "People Caring for People," we are committed to delivering exceptional patient care, building meaningful relationships, and driving continuous improvement and sustainable growth. In addition to our hospital network, Ramsay operates a growing community pharmacy network of more than 35 locations. Through our culture, The Ramsay Way, we place our people at the centre of everything we do-fostering collaboration, empowering teams, and achieving outstanding outcomes for patients and communities.

Responsibilities

  • ● Lead the technical investigation, response and containment of cybersecurity incidents.
  • ● Act as the technical QA lead for our MSSP, validating escalations and driving detection improvements.
  • ● Lead proactive threat hunting using threat intelligence and adversarial frameworks such as MITRE ATT&CK.
  • ● Use SIEM and EDR platforms to investigate suspicious activity and support technical containment.
  • ● Drive root-cause analysis, remediation and post-incident improvements.
  • ● Refine incident response playbooks, detection logic and SOAR automation.
  • ● Provide clear technical updates to the Cyber Operations Manager during security events.
  • ● Support tabletop exercises and provide technical mentoring to security and IT teams.

Requirements

  • ● Extensive cybersecurity experience in a large enterprise environment.
  • ● Strong hands-on experience across incident response, threat hunting, SIEM and EDR.
  • ● Experience with forensic investigation, root-cause analysis and technical remediation.
  • ● Strong understanding of the cyber threat landscape and frameworks such as MITRE ATT&CK.
  • ● Experience working with MSSPs/MSPs and hybrid SOC environments.
  • ● Strong analytical and communication skills.
  • ● Degree in Cybersecurity, IT or related field; healthcare or critical infrastructure experience; relevant technical certifications such as GCIA, GCFA or GCTI; and experience with SOAR or detection engineering.

Benefits

  • ● Competitive remuneration and comprehensive employee benefits.
  • ● Opportunities for professional and technical development.
  • ● Access to Ramsay Rewards and exclusive employee discounts.
  • ● The opportunity to influence cyber defence capability across a leading healthcare organisation.