Incident Response Lead

Live Nation; Sydney; Remote; AUD 150,000 - 210,000; Full time

Benefits offered by this job

Fully remote Australia

Professional development

Wellness programs

Concerts and events access

Flexible work

Diversity & inclusion

Job summary

Live Nation is seeking an experienced Incident Response Lead to fortify our global cybersecurity posture. You will drive containment, eradication, and recovery during cyber events while coordinating with regional teams and executive stakeholders.

The role is fully remote across Australia, with emphasis on leadership, forensics, and effective communication. You will develop post-incident learnings and tabletop exercises to strengthen resilience in a dynamic live-entertainment environment.

Qualifications

• 5+ years in cybersecurity with incident response experience.
• Ability to lead high-pressure security events and drive containment.

Responsibilities

• Lead incident response and guide containment, eradication, and recovery.
• Coordinate with technical teams and leadership for clear updates.
• Collect forensic artefacts and reconstruct attack chains.
• Deliver post-incident learning and postmortems.
• Develop stakeholder reporting for technical and non-technical audiences.
• Design and run tabletop exercises to improve readiness.
• Collaborate globally on a 24/7 on-call rotation.

Skills

Incident response

Cybersecurity

Leadership

Communication

Forensics

SIEM

Education

Bachelor’s degree

CISSP

Tools

EDR

IDS/IPS

AWS

Azure

GCP

Job description

About Live Nation:

Join the team at Live Nation, where innovation meets live entertainment on a global scale! With 40,000 shows and 500 million tickets sold each year, we’re the industry leader, powered by 44,000 talented individuals worldwide. At Live Nation, we’re passionate about transforming live events and creating extraordinary moments for artists, event professionals, and fans.

About the role:

Are you a calm and decisive professional with a passion for cybersecurity? Step into the role of Incident Response Lead and make an impact on a global scale. This is your chance to be on the front line of cyber defence, guiding teams through high-pressure security events and driving containment, eradication, and recovery efforts.

Working remotely, you’ll collaborate closely with technical experts and leadership across regions, ensuring alignment, clear communication, and swift decision-making during complex incidents. From leading evidence collection and reporting to shaping postmortems and training exercises, you’ll be the trusted subject matter expert steering the organisation through critical cyber challenges.

What you’ll be doing:

Lead incident response: Drive containment, eradication, and recovery efforts during cyber events, ensuring timely and effective resolution.

Bridge communication: Act as liaison between technical teams and leadership, delivering clear updates and trusted guidance.

Collect and analyse evidence: Gather forensic artefacts, reconstruct attack chains, and provide expert input into investigations.

Deliver post-incident learning: Conduct postmortems, document lessons, and recommend improvements to strengthen resilience.

Develop stakeholder reporting: Create clear and concise incident reports, guidance, and updates for technical and non-technical audiences.

Promote readiness: Design and run tabletop exercises and workshops to build team capability and organisational awareness.

Collaborate globally: Work closely with regional peers as part of a 24/7 on-call rotation across a complex global enterprise.

What you’ll bring:

Proven cyber background: 5+ years in cybersecurity, including 3+ years in incident response, with proven event investigation experience.

Analytical mindset: Advanced ability to categorise, investigate, and resolve incidents while preserving evidence.

Tool proficiency: Hands-on experience with SIEM, IDS/IPS, EDR, cloud platforms (AWS, Azure, GCP), and other defence technologies.

Resilient under pressure: Exceptional decision-making, problem-solving, and conflict management skills in high-stakes scenarios.

Strong communicator: Ability to prepare detailed reports and deliver executive-level briefings to diverse stakeholders.

Organisational skills: Strong time management, prioritisation, and leadership abilities to guide cross-functional teams.

Certifications & learning: Bachelor’s degree in a related field (or equivalent experience), with certifications such as CISSP, GCIH, or GCFA highly regarded.

The Benefits:

• A fully remote role, giving you the flexibility to be based anywhere in Australia.
• A vibrant, music-focused workplace fostering creativity and collaboration.
• Opportunities for professional development and career advancement.
• Access to concerts, events, and other entertainment perks.
• A flexible approach to when and where you work, designed to support balance in all aspects of life.
• A diverse, equitable workplace where every voice matters.
• Comprehensive benefits, from volunteer days to wellness programs and mental health support.

Equal Opportunities:

We are passionate and committed to our people and go beyond the rhetoric of diversity and inclusion. You will be working in an inclusive environment and be encouraged to bring your whole self to work. We will do all that we can to help you successfully balance your work and Homelife. As a growing business, we will encourage you to develop your professional and personal aspirations, enjoy new experiences, and learn from the talented people you will be working with. It's talent that matters to us and we encourage applications from people irrespective of their gender, race, sexual orientation, religion, age, disability status or caring responsibilities.