Ramsay Health Care is seeking an experienced Cyber Defence Technical Lead to play a key role in protecting our digital environment, systems and patient data. Reporting to the Cyber Operations Manager, this hands-on technical role will lead cyber incident response, proactive threat hunting and the ongoing maturity of Ramsay’s hybrid Security Operations Centre (SOC). Acting as the technical 2IC, you will be the key technical investigator during security incidents while also providing technical oversight of our Managed Security Service Provider (MSSP). This is an opportunity to combine deep technical expertise with genuine influence across a large and complex healthcare environment.
What You’ll Do
You’ll play a key role in strengthening Ramsay’s ability to detect, investigate and respond to cyber threats. From leading technical incident response through to proactive threat hunting and detection improvement, you’ll work across internal teams and external partners to strengthen our overall cyber defence capability.
- Lead the technical investigation, response and containment of cybersecurity incidents.
- Act as the technical QA lead for our MSSP, validating escalations and driving detection improvements.
- Lead proactive threat hunting using threat intelligence and adversarial frameworks such as MITRE ATT&CK.
- Use SIEM and EDR platforms to investigate suspicious activity and support technical containment.
- Drive root-cause analysis, remediation and post-incident improvements.
- Refine incident response playbooks, detection logic and SOAR automation.
- Provide clear technical updates to the Cyber Operations Manager during security events.
- Support tabletop exercises and provide technical mentoring to security and IT teams.
What You’ll Bring
You are a technically strong cybersecurity professional with experience investigating complex security incidents and identifying emerging threats.
You will bring:
- Extensive cybersecurity experience in a large enterprise environment.
- Strong hands-on experience across incident response, threat hunting, SIEM and EDR.
- Experience with forensic investigation, root-cause analysis and technical remediation.
- Strong understanding of the cyber threat landscape and frameworks such as MITRE ATT&CK.
- Experience working with MSSPs/MSPs and hybrid SOC environments.
- Strong analytical and communication skills.
Desirable: Degree in Cybersecurity, IT or related field; healthcare or critical infrastructure experience; relevant technical certifications such as GCIA, GCFA or GCTI; and experience with SOAR or detection engineering.
About Us
Founded in Australia in 1964, Ramsay Health Care is the nation’s largest private hospital operator and a recognised global leader in healthcare delivery. Across Australia, Ramsay operates 76 hospitals and 12 surgical centres, caring for more than 1.1 million patients each year with the support of over 30,000 dedicated professionals. Guided by our ethos, “People Caring for People,” we are committed to delivering exceptional patient care, building meaningful relationships, and driving continuous improvement and sustainable growth. In addition to our hospital network, Ramsay operates a growing community pharmacy network of more than 35 locations. Through our culture, The Ramsay Way, we place our people at the centre of everything we do—fostering collaboration, empowering teams, and achieving outstanding outcomes for patients and communities.
Benefits
- Competitive remuneration and comprehensive employee benefits.
- Opportunities for professional and technical development.
- Access to Ramsay Rewards and exclusive employee discounts.
- The opportunity to influence cyber defence capability across a leading healthcare organisation.
To Apply
All applications should include your CV outlining your experience and skills in line with the above criteria. Applications close Sunday 4th October 2026.
Additional InformationPlease Note:
Ramsay Health Care is committed to Child Safety. Details of our commitment are set out in our Code of Conduct, available at www.ramsayhealth.com.au.
Applications made by recruitment agencies will not be considered.
