Senior Analyst - Incident Response

Job Description

THE TEAM

The Cyber Defense and Incident Response team operates within the Corporate
Information Security and Privacy Organization and is a critical function within Live Nation
Entertainment. We specialize in detecting and responding to adverse events within our global network and provide rapid response times to mitigate the impact of potential threats.

You will work with a team that shares a common goal-continuously seeking ways to enhance threat detection and response capabilities and assist with the development and refinement of alerts across multiple tools. This is an exciting time to join as we expand our threat detection and incident response capabilities.

THE ROLE

As a Senior Cyber Security Incident Responder, you will be the subject matter expert in identifying and remediating real cyber threats from start to finish. You will leverage your extensive SOC experience to close out investigations efficiently and effectively.

You will have a thorough understanding of the cyber threat landscape and have an exceptional ability to conduct trending and correlation analysis of various cyber intel sources for the purposes of indicator collections, attributions and establishing countermeasures to proactively defends against threat actors.

WHAT THIS ROLE WILL DO
• Prepare, detect, respond, and mitigate cyber threats, protecting Live Nation Entertainment data and assets utilizing industry information security best practices.
• Triage security incidents and perform in-depth analysis using various resources such as cyber threat intelligence, intrusion detection systems, firewalls, and other boundary protection devices.
• Optimize cyber defenses with proven threat detections and intelligence; reducing noise and false positive alerting.
• Develop and execute Cybersecurity documentation during the incident response process.
• Escalate cybersecurity events according to playbooks and other defined processes.
• Conduct threat analyst activities based on internal and external threat intelligence to
• determine root cause.
• Manage incident investigations from start to finish, ensuring thorough documentation and closure
• Develop and maintain new technical and non-technical sources of information, threat research, threat analysis, modern threat actor tactics, techniques and procedures, briefings,
• and security awareness notifications
• Participate in on-call weekly rotations with other team members (Required)

WHAT THIS PERSON WILL BRING
• 5+ years of experience in a security operation center (SOC) analyst role or equivalent
• senior-level incident response experience.
• BA/BS in Computer Science, Information Security, or Information Systems or equivalent
• related work experience.
• Technical Cyber Security Certification(s) required (min. 1): GSEC, GMON, GCED, GCDA, GDAT, etc.
• First-hand experience with SIEM platforms, enterprise intrusion prevention systems, endpoint detection and response tools, and other security products. Knowledge of tailored security to specific events.
• Ability to detect and defend against commonly-used attack tactics, techniques, and
• procedures (TTPs) against known attack surfaces such as identity, email, endpoint, network,
• and cloud.
• Experience with different threat types: ransomware, bots, crypto miners, RATs, info stealers, trojans, malicious JavaScript, phishing sites, fake profiles, man-in-the-middle, and others.
• Configure and manage security tools and platforms to optimize the intelligence value of
• alerts and logs.
• Perform comprehensive analytics of current and historical logs to fill knowledge gaps.
• Conduct low-level as well as deep-dive analysis to identify potential threats, indicators of
• compromise (IOCs), and root cause analysis.
• Provide superior internal and external customer support, with the ability to walk through
• remediation actions to non-technical audiences.
• Technical knowledge and experience with hardware & software as well as
• Windows/Linux/Mac Operating Systems.
• Knowledge of threat analysis, incident response, and network security.
• Required to be available 24x7 during weekly on-call rotations.
• Must be able to pass a criminal background check and obtain a US government security
• clearance if requested.

Ideal Personal Characteristics:
• Strong sense of moral character, high-ethical standards, and accountability.
• Have a global mindset for working with different cultures and backgrounds.
• Highly meticulous with exceptional attention to detail.
• Analytical and strategic mindset to overcome obstacles and solve complex problems.
• Strong organizational skills with the ability to complete tasks assigned in a timely manner.
• Self-driven and self-disciplined to perform tasks and complete projects with little to no
• supervision.
• Excellent English written and verbal communication skills; additional languages are a plus.
• Exceptional ability to remain calm under stress.
• Excellent customer service skills.
• Flexible and responsive to changing situations.
• Ability to work independently and as part of a team.

BENEFITS & PERKS
Our motto is 'Taking Care of Our Own' through 6 pillars of benefits:
• HEALTH: Medical, Vision and Dental benefits for you and your family, including Flexible Spending Accounts (FSA) and Health Savings Accounts (HSAs)
• YOURSELF: Generous paid time off policy including paid holidays, sick time and paid days off for your birthday, Free concert tickets
• WEALTH: 401(k) program with company match, Stock Program
• FAMILY: New parent programs & support including caregiver leave and childcare cash, infertility support
• CAREER: Tuition reimbursement, student loan repayment internal growth and development programs & trainings
• OTHERS: Volunteer time off, crowdfunding network

Live Nation's policy regarding vaccinations and masking related to a pandemic or other infectious disease control measures, acts of God, health and safety mandates and/or restrictions imposed by applicable local, state or federal governments has evolved over time. Currently, we strongly encourage employees to be fully vaccinated from such infectious diseases for which vaccinations are available. You are expected to follow Live Nation's health and safety protocols and policies as they change from time to time.

Jobcode: Reference SBJ-gq1ovm-3-147-46-181-42 in your application.