Incident Response Advanced Lead

🕒 May 26

🏄 California – Remote

🏄 California – Remote

💵 $140k - $175k / year

⏰ Full Time

🟠 Senior

Apply Now

Find Similar Remote Jobs

Receive Emails For Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Live Nation Entertainment

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1996

📱 Media

💰 Post-IPO Debt on 2023-01

Media • Entertainment

Live Nation Entertainment is the global leader in live entertainment, powering unforgettable experiences around the world. Artist-powered and fan-driven, Live Nation works with musicians to bring their creativity to life on stages across the globe. As the top producer of concerts, ticket seller, and brand connector to music, Live Nation's platform leads the market in these three core industries. Their mission extends beyond entertainment, aiming to uplift, inspire, and create memories through the power of live music.

📋 Description

• Serve as the primary Incident Commander for all high-severity (SEV-1 / SEV-2) cyber incidents • Architect and enforce the incident battle rhythm at an advanced level • Translate complex technical findings into authoritative situational awareness for non-technical stakeholders • Make independent, time-sensitive decisions on severity classification, scope expansion, external support activation, and incident closure criteria • Own the executive communication stream at the highest level during incidents • Maintain and enforce the authoritative incident timeline standard in real time during response • Design and lead a sophisticated annual tabletop and functional exercise program • Drive enterprise alignment to NIST SP 800-61r3, NIST CSF 2.0, and applicable regulatory frameworks • Shape and drive the multi-year IR program strategy

🎯 Requirements

• 10+ years in cybersecurity, with at least 6–7 years directly leading incident response operations at enterprise scale • Deep, hands-on experience as a primary incident commander on multiple major incidents across diverse attack scenarios • Expert-level fluency in MITRE ATT&CK, cyber kill chain, diamond model, and IR frameworks (NIST SP 800-61, SANS PICERL) • Mastery of executive-level written and verbal communication under pressure • Advanced program and project management skills • Comprehensive knowledge of regulatory and legal obligations for cyber incidents • Prior experience in a Fortune 500, large-scale entertainment/media/technology company, or heavily regulated industry • At least one industry certification demonstrating sustained commitment to the discipline: GCIH, GCFA, GCIA, CISSP, CISM, or equivalent

🏖️ Benefits

• Medical, vision, dental and mental health benefits for you and your family • Free concert tickets • Generous paid time off including paid holidays, sick time, and personal days • 401(k) program with company match • Stock reimbursement program • New parent programs including caregiver leave, plus fertility, adoption, foster, or surrogacy support • Career and skill development programs with School of Live, tuition reimbursement, and student loan repayment • Volunteer time off, crowdfunding match