Incident Response Lead

Live Nation Entertainment Inc; Australia; Remote; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Remote Australia

Music-focused workplace

Professional development

Entertainment perks

Flexible schedule

Diversity & inclusion

Volunteer days

Wellness & mental health

Job summary

Live Nation Entertainment Inc is seeking an Incident Response Lead to guide containment, eradication, and recovery during cyber incidents. You will bridge communication between technical teams and leadership, coordinate evidence collection, and drive post-incident learnings.

The role is fully remote within Australia, with 24/7 on-call rotation across a global enterprise. Applicants should have 5+ years in cybersecurity, 3+ years in incident response, and certifications such as CISSP, GCFA, or

Qualifications

• 5+ years in cybersecurity, including 3+ years in incident response, with proven event investigation experience.

Responsibilities

• Lead incident response: Drive containment, eradication, and recovery efforts during cyber events, ensuring timely and effective resolution.

Skills

Incident response

Cybersecurity

SIEM

IDS/IPS

EDR

Cloud platforms

AWS

Azure

GCP

Communication

Leadership

Time management

Tools

SIEM

EDR

Cloud platforms

Job description

Incident Response Lead### Incident Response LeadApply: Work from Home - Australia: Full time: Posted Today: JR-93774Job Summary:**About Live Nation:**Join the team at Live Nation, where innovation meets live entertainment on a global scale! With 40,000 shows and 500 million tickets sold each year, we’re the industry leader, powered by 44,000 talented individuals worldwide. At Live Nation, we’re passionate about transforming live events and creating extraordinary moments for artists, event professionals, and fans. **About the role:**Are you a calm and decisive professional with a passion for cybersecurity? Step into the role of **Incident Response Lead** and make an impact on a global scale. This is your chance to be on the front line of cyber defence, guiding teams through high-pressure security events and driving containment, eradication, and recovery efforts. Working remotely, you’ll collaborate closely with technical experts and leadership across regions, ensuring alignment, clear communication, and swift decision-making during complex incidents. From leading evidence collection and reporting to shaping postmortems and training exercises, you’ll be the trusted subject matter expert steering the organisation through critical cyber challenges. If you’re passionate about cybersecurity, thrive under pressure, and have what it takes to keep our global operations resilient, we’d love to hear from you. Apply with a **cover letter** highlighting why you’re the right person to lead us through high-pressure incidents. **What you’ll be doing:*** **Lead incident response:** Drive containment, eradication, and recovery efforts during cyber events, ensuring timely and effective resolution.* **Bridge communication:** Act as liaison between technical teams and leadership, delivering clear updates and trusted guidance.* **Collect and analyse evidence:** Gather forensic artefacts, reconstruct attack chains, and provide expert input into investigations.* **Deliver post-incident learning:** Conduct postmortems, document lessons, and recommend improvements to strengthen resilience.* **Develop stakeholder reporting:** Create clear and concise incident reports, guidance, and updates for technical and non-technical audiences.* **Promote readiness:** Design and run tabletop exercises and workshops to build team capability and organisational awareness.* **Collaborate globally:** Work closely with regional peers as part of a 24/7 on-call rotation across a complex global enterprise. **What you’ll bring:*** **Proven cyber background:** 5+ years in cybersecurity, including 3+ years in incident response, with proven event investigation experience.* **Analytical mindset:** Advanced ability to categorise, investigate, and resolve incidents while preserving evidence.* **Tool proficiency:** Hands-on experience with SIEM, IDS/IPS, EDR, cloud platforms (AWS, Azure, GCP), and other defence technologies.* **Resilient** **under pressure:** Exceptional decision-making, problem-solving, and conflict management skills in high-stakes scenarios.* **Strong communicator:** Ability to prepare detailed reports and deliver executive-level briefings to diverse stakeholders.* **Organisational skills:** Strong time management, prioritisation, and leadership abilities to guide cross-functional teams.* **Certifications & learning:** Bachelor’s degree in a related field (or equivalent experience), with certifications such as CISSP, GCIH, or GCFA highly regarded.**The Benefits:*** A fully remote role, giving you the flexibility to be based anywhere in Australia.* A vibrant, music-focused workplace fostering creativity and collaboration.* Opportunities for professional development and career advancement.* Access to concerts, events, and other entertainment perks.* A flexible approach to when and where you work, designed to support balance in all aspects of life.* A diverse, equitable workplace where every voice matters.* Comprehensive benefits, from volunteer days to wellness programs and mental health support. **Equal Opportunities:**We are passionate and committed to our people and go beyond the rhetoric of diversity and inclusion. You will be working in an inclusive environment and be encouraged to bring your whole self to work. We will do all that we can to help you successfully balance your work and Homelife. As a growing business, we will encourage you to develop your professional and personal aspirations, enjoy new experiences, and learn from the talented people you will be working with. It's talent that matters to us and we encourage applications from people irrespective of their gender, race, sexual orientation, religion, age, disability status or caring responsibilities. #LNAPAC #LI-TO1Live Nation Entertainment will never request payment or equipment purchases as part of the hiring process. Recruiters will only contact candidates from official Live Nation or affiliated brand email domains.