Company Description
MedHealth are a purpose-built collection of industry leading health, medical and employment brands. Our unique and diverse capabilities come together to get the best possible health and employment outcomes for you and the people you support. We support whole populations to better outcomes, yet never lose sight of the individual we are working with to build a better life through work and health.
Job Description
We are seeking a Security Operations Technical Lead to join our Cyber Security team. This role is responsible for the technical delivery of day-to-day security operations, including incident response, escalation handling, and the management of core cyber defence platforms.
This is a hands-on role requiring advanced technical capability. The successful candidate will act as a technical escalation point, mentor team members, and ensure the ongoing resilience of our security operations.
What You’ll Do
- Lead and prioritise day-to-day security operations, including incident response, monitoring, ticket escalations, and workload distribution.
- Own and tune enterprise security tools (SIEM, EDR, PAM, Email gateway, cloud security platforms).
- Act as the primary escalation point for complex incidents and investigations.
- Maintain and improve operational runbooks, playbooks, and reporting.
- Work closely with our SOC partner to ensure 24/7 detection and response coverage.
- Act as a bridge between Security and IT Operations, helping translate security priorities into operational actions and gaining buy-in from technical peers.
- Drive continuous improvement initiatives by identifying gaps, proposing solutions, and ensuring lessons learned from incidents feed back into processes and tools.
- Provide technical guidance and mentorship to security engineers and analysts, fostering skill development and knowledge sharing.
Qualifications
What You’ll Bring
- 5+ years’ experience in cybersecurity operations or engineering.
- Demonstrated expertise in incident response, detection engineering, and BAU security operations.
- Hands-on experience with enterprise security platforms (SIEM, EDR, PAM, DLP, CASB, cloud-native tools).
- Strong knowledge of modern attack techniques (MITRE ATT&CK, threat actor TTPs).
- Experience operating within a mature, enterprise level security department.
- Relevant certifications are highly regarded (e.g., GCIH, GCIA, OSCP, Azure/AWS Security, CISSP).
- Team leadership or mentoring experience is desirable but not essential — technical depth is key.
- Australia Citizenship or Permanent Residency required.
Additional Information
Why you’ll love it here:
- Technical leadership within a growing cyber security team
- Work with modern security platforms and a strong SOC partner.
- Work somewhere serious about cybersecurity done right.
- A culture that values continuous improvement, learning, and knowledge sharing.
- Great balance of working from home and office collaboration.
You are welcome here.
Our fast-growing team of more than 3,500 people around Australia represent a huge array of life experiences, skills and ways of thinking. We value all these differences.
We are an Equal Opportunity Employer, proudly welcoming people with disability including mental health conditions, people from diverse cultural and linguistic backgrounds, people from the LGBTQI community, veterans, carers and Indigenous Australians to our team.
We are happy to adjust our recruitment process to support accessibility needs.
