Incident Response Lead

Live Nation; Greater London; On-site; GBP 75,000 - 95,000; Full time

Job summary

A leading entertainment company in Greater London is seeking an Incident Response Lead to manage cyber security events effectively. The role requires exceptional communication and organizational skills while coordinating with technical teams during incidents. Candidates should possess a Bachelor's degree in Computer Science or related fields, with at least 5 years of experience in Cyber Security, including 3 years in Incident Response roles. This position offers opportunities for professional growth in a fast-paced environment.

Benefits

Inclusive work environment

Opportunities for professional development

Work-life balance support

Qualifications

• 5 years of experience in Cyber Security Operations type role.
• 3 years of experience specifically in Incident Response type roles.
• Experience working in large global enterprises with complex technical infrastructures.

Responsibilities

• Drive containment and eradication of threats during cybersecurity events.
• Communicate effectively with stakeholders during high-pressure scenarios.
• Conduct postmortem lessons learned that contribute to the improvement of the team.

Skills

Excellent communication skills

Strong organizational skills

Analytical skills

Problem-solving skills

Collaborative team player

Education

Bachelors degree in Computer Science, Information Security, or related field

Tools

SIEMs

IDS / IPS

DLP

Vulnerability management platforms

AWS

GCP

Azure

Job description

Job Summary :

The Incident Response Lead is responsible for driving the containment and eradication of threats during cyber security events and following through with supporting remediation efforts post events within a fast-paced and dynamic environment in effort to restore normal secure service delivery. This individual will act as a liaison between technical teams and leadership ensuring effective communication and alignment on cybersecurity priorities. This role will require attention to detail ability to organize and document information and in-depth knowledge of cyber security processes to support the global organization through complex and high-pressure incidents.

This role is ideal for an experienced cybersecurity professional with a passion for leading technical projects fostering team alignment and delivering results in a dynamic and complex enterprise environment.

WHAT THIS ROLE WILL DO

Capture detailed notes and deliver precise accurate reports to stakeholders during high-pressure scenarios ensuring all action items are effectively communicated and delegated to the Cyber Defense team or partners for execution; throughout the lifecycle of an incident.

Collect evidence from cyber events and utilize data to build a complete chain of events from initial access through eradication and recovery phases.

Advise and coordinate with Incident Commander by providing trusted expert advice to support the successful conclusion of a cyber incident.

Receive and analyze signals from numerous sources to determine possible causes of alerts.

Conduct document and report postmortem lessons learned that contribute to the improvement of the team and the organizations cyber program.

Develop and communicate reports on Cyber Defense TTPs guidance and incident findings to various stakeholders.

Advise and collect forensically sound artifacts for inspection to support cyber incidents.

Engage with both technical and non-technical stakeholders in a professional manner both internally and externally to the business on sensitive cybersecurity issues.

Develop training and exercises to promote both team and organizational development to improve delivery during incidents through the creation and conduction of tabletop and workshops.

Work as part of a global team.

Be the Incident Response SME.

WHAT THIS PERSON WILL BRING

Bachelors degree in Computer Science Information Security or a related field.

5 years of experience in Cyber Security Operations type role.

3 years of experience specifically in Incident Response type roles that performed event investigations.

Excellent communication skills with experience delivering executive-level briefings and reports.

Solid understanding of cybersecurity principles including incident response policy governance and compliance requirements.

Experience with security tools such as SIEMs IDS / IPS DLP and vulnerability management platforms.

Strong organizational time-management and leadership skills.

Experience in the application of available tooling to defend against cyber threats and hardened existing systems against further attacks.

Experience in response to at least one public cloud vendor (e.g. : AWS. GCP Azure etc).

Experience in response to a variety of system types and applications.

Must be willing to work an on-call rotation.

Excellent analytical and problem-resolution skills to collect / preserve evidence for documentation and reporting.

Certifications : CISSP GCIH GCFA CySA.

Experience working in large global enterprises with complex technical infrastructures.

Knowledge of audit frameworks and regulatory compliance requirements (e.g. SOX GDPR PCI DSS).

Familiarity with cloud security architectures and tools (e.g. AWS Azure GCP).

Exceptional ability to remain calm and focused during high-stress situations.

Strong problem-solving and conflict management skills.

A collaborative team player who thrives in a global cross-functional environment.

Equal Opportunities

We are passionate and committed to our people and go beyond the rhetoric of diversity and inclusion. You will be working in an inclusive environment and be encouraged to bring your whole self to work. We will do all that we can to help you successfully balance your work and home life. As a growing business we will encourage you to develop your professional and personal aspirations enjoy new experiences and learn from the talented people you will be working with. Its talent that matters to us and we encourage applications from people irrespective of their gender race sexual orientation religion age disability status or caring responsibilities.

Employment Type: Full-Time

Experience: years

Vacancy: 1