Incident Response Lead

Live Nation Entertainment Inc; United States; Remote; USD 83,000 - 125,000; Full time

Benefits offered by this job

Remote role

Concert access

Professional development

Wellness programs

Volunteer days

Flexible work

Diversity & inclusion

Job summary

Live Nation Entertainment is seeking an Incident Response Lead to drive containment, eradication, and recovery during cyber events. You will coordinate with regional teams, provide clear guidance to leadership, and shape post-incident learning to strengthen resilience.

The role is remote, with collaboration across regions and a 24/7 on-call rotation. You will influence security posture through evidence collection, reporting, and ready-to-act tabletop exercises, while communicating with diverse

Qualifications

• 5+ years in cybersecurity with ≥3 years in incident response.
• Ability to investigate incidents and preserve evidence.
• Experience with SIEM and cloud security tooling.
• Strong communication for executive briefings.
• Bachelor’s degree or equivalent with relevant certifications.

Responsibilities

• Lead incident response including containment, eradication and recovery.
• Bridge communication between technical teams and leadership.
• Collect forensic artifacts and reconstruct attack chains.
• Deliver post-incident learning and improve resilience.
• Create clear incident reports for technical and non-technical audiences.
• Design tabletop exercises to improve readiness.
• Collaborate globally on 24/7 on-call rotations.

Skills

Analytical mindset

Resilient under pressure

Strong communicator

Leadership

Time management

Education

Bachelor’s degree or equivalent

CISSP

GCIH

GCFA

Tools

SIEM

IDS/IPS

EDR

AWS

Azure

GCP

Job description

Job Summary:

About Live Nation:

Join the team at Live Nation, where innovation meets live entertainment on a global scale! With 40,000 shows and 500 million tickets sold each year, we’re the industry leader, powered by 44,000 talented individuals worldwide. At Live Nation, we’re passionate about transforming live events and creating extraordinary moments for artists, event professionals, and fans.

About the role:

Are you a calm and decisive professional with a passion for cybersecurity? Step into the role of Incident Response Lead and make an impact on a global scale. This is your chance to be on the front line of cyber defence, guiding teams through high-pressure security events and driving containment, eradication, and recovery efforts.

Working remotely, you’ll collaborate closely with technical experts and leadership across regions, ensuring alignment, clear communication, and swift decision-making during complex incidents. From leading evidence collection and reporting to shaping postmortems and training exercises, you’ll be the trusted subject matter expert steering the organisation through critical cyber challenges.

If you’re passionate about cybersecurity, thrive under pressure, and have what it takes to keep our global operations resilient, we’d love to hear from you. Apply with a cover letter highlighting why you’re the right person to lead us through high-pressure incidents.

What you’ll be doing:

• Lead incident response: Drive containment, eradication, and recovery efforts during cyber events, ensuring timely and effective resolution.
• Bridge communication: Act as liaison between technical teams and leadership, delivering clear updates and trusted guidance.
• Collect and analyse evidence: Gather forensic artefacts, reconstruct attack chains, and provide expert input into investigations.
• Deliver post-incident learning: Conduct postmortems, document lessons, and recommend improvements to strengthen resilience.
• Develop stakeholder reporting: Create clear and concise incident reports, guidance, and updates for technical and non-technical audiences.
• Promote readiness: Design and run tabletop exercises and workshops to build team capability and organisational awareness.
• Collaborate globally: Work closely with regional peers as part of a 24/7 on-call rotation across a complex global enterprise.

What you’ll bring:

• Proven cyber background: 5+ years in cybersecurity, including 3+ years in incident response, with proven event investigation experience.
• Analytical mindset: Advanced ability to categorise, investigate, and resolve incidents while preserving evidence.
• Tool proficiency: Hands-on experience with SIEM, IDS/IPS, EDR, cloud platforms (AWS, Azure, GCP), and other defence technologies.
• Resilient under pressure: Exceptional decision-making, problem-solving, and conflict management skills in high-stakes scenarios.
• Strong communicator: Ability to prepare detailed reports and deliver executive-level briefings to diverse stakeholders.
• Organisational skills: Strong time management, prioritisation, and leadership abilities to guide cross-functional teams.
• Certifications & learning: Bachelor’s degree in a related field (or equivalent experience), with certifications such as CISSP, GCIH, or GCFA highly regarded.

The Benefits:

• A fully remote role, giving you the flexibility to be based anywhere in Australia.
• A vibrant, music-focused workplace fostering creativity and collaboration.
• Opportunities for professional development and career advancement.
• Access to concerts, events, and other entertainment perks.
• A flexible approach to when and where you work, designed to support balance in all aspects of life.
• A diverse, equitable workplace where every voice matters.
• Comprehensive benefits, from volunteer days to wellness programs and mental health support.

Equal Opportunities:

We are passionate and committed to our people and go beyond the rhetoric of diversity and inclusion. You will be working in an inclusive environment and be encouraged to bring your whole self to work. We will do all that we can to help you successfully balance your work and Homelife. As a growing business, we will encourage you to develop your professional and personal aspirations, enjoy new experiences, and learn from the talented people you will be working with. It’s talent that matters to us and we encourage applications from people irrespective of their gender, race, sexual orientation, religion, age, disability status or caring responsibilities.

#LNAPAC #LI-TO1

Live Nation Entertainment will never request payment or equipment purchases as part of the hiring process. Recruiters will only contact candidates from official Live Nation or affiliated brand email domains.