Incident Response Lead

Live Nation Entertainment Inc; United States; Remote; USD 83,000 - 125,000; Full time

Benefits offered by this job

Fully remote AU

Music-focused workplace

Professional development

Concert access

Flexible schedule

Diversity & inclusion

Job summary

Live Nation Entertainment is seeking an Incident Response Lead to command containment, eradication, and recovery during cyber events. This fully remote role can be based anywhere in Australia and requires strong leadership under pressure.

You will bridge gaps between technical teams and executives, collect forensic evidence, and drive post-incident learning through reports and tabletop exercises. A bachelor’s degree and relevant certifications are preferred.

Qualifications

• 5+ years in cybersecurity, including 3+ years in incident response.
• Experience collecting and analyzing forensic artefacts.
• Ability to communicate with executives and diverse stakeholders.
• Experience leading incident response during high-pressure events.

Responsibilities

• Lead incident response: containment, eradication, and recovery.
• Bridge communication between technical teams and leadership.
• Collect and analyze evidence for investigations.
• Deliver post-incident learning and reports.
• Develop stakeholder reporting and run tabletop exercises.
• Collaborate globally on a 24/7 on-call rotation.

Skills

Incident response

Cybersecurity

Analytical thinking

Stakeholder communication

Tabletop exercises

Education

Bachelor's degree or equivalent

Tools

SIEM

EDR

IDS/IPS

AWS

Azure

GCP

Forensic tools

Job description

Job Summary:About Live Nation:Join the team at Live Nation, where innovation meets live entertainment on a global scale! With 40,000 shows and 500 million tickets sold each year, we’re the industry leader, powered by 44,000 talented individuals worldwide. At Live Nation, we’re passionate about transforming live events and creating extraordinary moments for artists, event professionals, and fans.About the role:Are you a calm and decisive professional with a passion for cybersecurity? Step into the role of Incident Response Lead and make an impact on a global scale. This is your chance to be on the front line of cyber defence, guiding teams through high-pressure security events and driving containment, eradication, and recovery efforts.Working remotely, you’ll collaborate closely with technical experts and leadership across regions, ensuring alignment, clear communication, and swift decision-making during complex incidents. From leading evidence collection and reporting to shaping postmortems and training exercises, you’ll be the trusted subject matter expert steering the organisation through critical cyber challenges.If you’re passionate about cybersecurity, thrive under pressure, and have what it takes to keep our global operations resilient, we’d love to hear from you. Apply with a cover letter highlighting why you’re the right person to lead us through high-pressure incidents.What you’ll be doing:Lead incident response: Drive containment, eradication, and recovery efforts during cyber events, ensuring timely and effective resolution.Bridge communication: Act as liaison between technical teams and leadership, delivering clear updates and trusted guidance.Collect and analyse evidence: Gather forensic artefacts, reconstruct attack chains, and provide expert input into investigations.Deliver post-incident learning: Conduct postmortems, document lessons, and recommend improvements to strengthen resilience.Develop stakeholder reporting: Create clear and concise incident reports, guidance, and updates for technical and non-technical audiences.Promote readiness: Design and run tabletop exercises and workshops to build team capability and organisational awareness.Collaborate globally: Work closely with regional peers as part of a 24/7 on-call rotation across a complex global enterprise.What you’ll bring:Proven cyber background: 5+ years in cybersecurity, including 3+ years in incident response, with proven event investigation experience.Analytical mindset: Advanced ability to categorise, investigate, and resolve incidents while preserving evidence.Tool proficiency: Hands-on experience with SIEM, IDS/IPS, EDR, cloud platforms (AWS, Azure, GCP), and other defence technologies.Resilient under pressure: Exceptional decision-making, problem-solving, and conflict management skills in high-stakes scenarios.Strong communicator: Ability to prepare detailed reports and deliver executive-level briefings to diverse stakeholders.Organisational skills: Strong time management, prioritisation, and leadership abilities to guide cross-functional teams.Certifications & learning: Bachelor’s degree in a related field (or equivalent experience), with certifications such as CISSP, GCIH, or GCFA highly regarded.The Benefits:A fully remote role, giving you the flexibility to be based anywhere in Australia.A vibrant, music-focused workplace fostering creativity and collaboration.Opportunities for professional development and career advancement.Access to concerts, events, and other entertainment perks.A flexible approach to when and where you work, designed to support balance in all aspects of life.A diverse, equitable workplace where every voice matters.Comprehensive benefits, from volunteer days to wellness programs and mental health support.Equal Opportunities:We are passionate and committed to our people and go beyond the rhetoric of diversity and inclusion. You will be working in an inclusive environment and be encouraged to bring your whole self to work. We will do all that we can to help you successfully balance your work and Homelife. As a growing business, we will encourage you to develop your professional and personal aspirations, enjoy new experiences, and learn from the talented people you will be working with. It's talent that matters to us and we encourage applications from people irrespective of their gender, race, sexual orientation, religion, age, disability status or caring responsibilities.#LNAPAC #LI-TO1Live Nation Entertainment will never request payment or equipment purchases as part of the hiring process. Recruiters will only contact candidates from official Live Nation or affiliated brand email domains.