Senior Director – Cyber Security Operations

Live Nation Entertainment

. Provide first-layer cyber defense by continuously improving detections through innovative automation .

Posted 9/17/2026full-timeRemote • California • United StatesSenior💰 $188,000 - $235,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in threat detection and incident response, with a strong focus on automation and team leadership. Proficient in managing security operations, developing detection methodologies, and enhancing cybersecurity workflows.

Highest-signal resume keywords

Threat Detection And ResponseSecurity Operations Center (SOC)Cyber Security CertificationLinux/Unix And Windows System AnalysisSIEM Technologies

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ResponseThreat HuntingNetwork ArchitectureMalware AnalysisForensic AnalysisDetection Rule DevelopmentAPI Automation IntegrationsEvent-Log AnalysisData Collection And AnalysisContainment And Remediation

Soft Skills

Team LeadershipMentoringExcellent Communication SkillsCustomer ServiceCollaboration

Tools & Technologies

IDS/IPSAdvanced Anti-MalwareDLPEncryptionAntivirusFirewallsIdentity ManagementNACArcSightSplunk

Certifications & Qualifications

GCEDGCDAGDAT

Industry Keywords

NIST Cyber Security FrameworkNIST SP800-61 R2ISO/IEC 27035Cybersecurity TrendsSecurity Benchmarks

Tech Stack

Tools & technologies

CloudCyber SecurityFirewallsLinuxSplunkUnix

About the role

Key responsibilities & impact

Provide first-layer cyber defense by continuously improving detections through innovative automation
Serve as subject matter expert for threat detection and response
Prepare for, detect, respond to, and mitigate cyber threats protecting company data and assets
Lead a geographically dispersed team of detection and response analysts monitoring, triaging, and responding to security events across a 24x7 global network
Implement detection methodologies, baseline network traffic, and monitor anomalous activity
Manage Threat Detection and Response team operations, including people management, training, and mentoring
Leverage automation and orchestration solutions to automate repetitive tasks
Collaborate with internal and external teams and subject matter experts on cybersecurity issues
Support projects and strategic initiatives to improve workflows and monitoring and response capabilities
Assist with threat hunting, data collection and analysis, triage, containment, remediation, and documentation
Maintain process documentation, lessons learned, and internal response playbooks
Develop and deliver team efficiency and effectiveness metrics to leadership
Manage team members’ career development, performance reviews, training, and mentoring
Promote an inclusive, unified team culture and exceptional customer service
Research current cybersecurity trends, best practices, and technology developments
Participate in required weekly on-call rotations

Requirements

What you’ll need

8+ years of Information Technology experience
Member of a Security Operations Center (SOC)
Minimum 2 years as a Security Incident Response Analyst or in a supporting function
eDiscovery or related role performing forensic functions
6+ years of people management experience
2+ years of Information Security and Incident Response or similar discipline
2+ years of Linux/Unix, Mac and Windows system analysis experience
At least one required technical Cyber Security Certification, such as GCED, GCDA, or GDAT
BA/BS in Computer Science, Information Security, or Information Systems, or equivalent related work experience
Experience working in a large enterprise and managing security tools including IDS/IPS, advanced anti-malware, DLP, encryption, antivirus, firewalls, identity management, and NAC
Familiarity with NIST Cyber Security Framework, NIST SP800-61 R2, and ISO/IEC 27035
Experience with threat modeling concepts, including threat indicators, threat actors, and attack surfaces
Understanding of network architecture and security infrastructure placement
Experience with SIEM technologies such as ArcSight, Splunk, or ELK Stack
In-depth technical knowledge of Windows and Unix/Linux operating systems
Some domestic and international travel required
Willingness to be available 24x7 during weekly on-call rotations
Willingness to work non-traditional hours, including weekends and holidays, as needed
Ability to pass a criminal background check and a U.S. government security clearance if requested
Knowledge of malware and threat actor operations
Knowledge of SIEM data sources and event-log analysis
Experience with containment, eradication, remediation, and preservation of forensic artifacts
Understanding of security benchmarks and device hardening across physical and cloud devices
Ability to develop detection rules and API automation integrations
Experience participating in small- and large-scale incident response activities
Ability to design dashboards, reports, and queries using query and scripting languages
Ability to reverse engineer network or endpoint compromises
Ability to create organized incident notes and document timelines in ticketing systems
Excellent English written and verbal communication skills
Excellent customer service skills

Benefits

Comp & perks

Medical, vision, dental and mental health benefits for you and your family
Health care concierge
Flexible or Health Savings Accounts (FSA or HSA)
Free concert tickets
Generous paid time off, including paid holidays, sick time, and personal days
401(k) program with company match
Stock reimbursement program
New parent programs, including caregiver leave and baby bonuses
Fertility, adoption, foster, or surrogacy support
Career and skill development programs with School of Live
Tuition reimbursement
Student loan repayment
Volunteer time off
Crowdfunding match
Flexible and remote work arrangement indicated by the posting location