Incident Response Lead

Job Summary:

Join the team at Live Nation, where innovation meets live entertainment on a global scale! With 40,000 shows and 500 million tickets sold each year, we’re the industry leader, powered by 44,000 talented individuals worldwide. At Live Nation, we’re passionate about transforming live events and creating extraordinary moments for artists, event professionals, and fans.

Are you a calm and decisive professional with a passion for cybersecurity? Step into the role of Incident Response Lead and make an impact on a global scale. This is your chance to be on the front line of cyber defence, guiding teams through high-pressure security events and driving containment, eradication, and recovery efforts.

Working remotely, you’ll collaborate closely with technical experts and leadership across regions, ensuring alignment, clear communication, and swift decision-making during complex incidents. From leading evidence collection and reporting to shaping postmortems and training exercises, you’ll be the trusted subject matter expert steering the organisation through critical cyber challenges.

If you’re passionate about cybersecurity, thrive under pressure, and have what it takes to keep our global operations resilient, we’d love to hear from you. Apply with a cover letter highlighting why you’re the right person to lead us through high-pressure incidents.

• →Lead incident response: Drive containment, eradication, and recovery efforts during cyber events, ensuring timely and effective resolution.
• →Bridge communication: Act as liaison between technical teams and leadership, delivering clear updates and trusted guidance.
• →Collect and analyse evidence: Gather forensic artefacts, reconstruct attack chains, and provide expert input into investigations.
• →Deliver post-incident learning: Conduct postmortems, document lessons, and recommend improvements to strengthen resilience.
• →Develop stakeholder reporting: Create clear and concise incident reports, guidance, and updates for technical and non-technical audiences.
• →Promote readiness: Design and run tabletop exercises and workshops to build team capability and organisational awareness.
• →Collaborate globally: Work closely with regional peers as part of a 24/7 on-call rotation across a complex global enterprise.

• Proven cyber background: 5+ years in cybersecurity, including 3+ years in incident response, with proven event investigation experience.
• Analytical mindset: Advanced ability to categorise, investigate, and resolve incidents while preserving evidence.
• Tool proficiency: Hands-on experience with SIEM, IDS/IPS, EDR, cloud platforms (AWS, Azure, GCP), and other defence technologies.
• Resilient under pressure: Exceptional decision-making, problem-solving, and conflict management skills in high-stakes scenarios.
• Strong communicator: Ability to prepare detailed reports and deliver executive-level briefings to diverse stakeholders.
• Organisational skills: Strong time management, prioritisation, and leadership abilities to guide cross-functional teams.
• Certifications & learning: Bachelor’s degree in a related field (or equivalent experience), with certifications such as CISSP, GCIH, or GCFA highly regarded.

We are passionate and committed to our people and go beyond the rhetoric of diversity and inclusion. You will be working in an inclusive environment and be encouraged to bring your whole self to work. We will do all that we can to help you successfully balance your work and Homelife. As a growing business, we will encourage you to develop your professional and personal aspirations, enjoy new experiences, and learn from the talented people you will be working with. It's talent that matters to us and we encourage applications from people irrespective of their gender, race, sexual orientation, religion, age, disability status or caring responsibilities.

#LNAPAC #LI-TO1

Live Nation Entertainment will never request payment or equipment purchases as part of the hiring process. Recruiters will only contact candidates from official Live Nation or affiliated brand email domains.