Senior Director - Cyber Security Operations

Job Summary:WHO ARE WE?Live Nation Entertainment is the world’s leading live entertainment company, comprised of global market leaders: Ticketmaster, Live Nation Concerts, and Live Nation Media & Sponsorship. Ticketmaster is the global leader in event ticketing with over 620 million tickets sold annually and approximately 10,000 clients worldwide. Live Nation Concerts is the largest provider of live entertainment in the world promoting more than 50,000 events annually for nearly 7,000 artists in 40+ countries. These businesses allow Live Nation Media & Sponsorship to create strategic music marketing programs that connect more than 1,200 sponsors with the 145 million fans that attend Live Nation Entertainment events each year. For additional information, visit .WHO ARE YOU?Passionate and motivated. Driven, with an entrepreneurial spirit. Resourceful, innovative, forward thinking and committed. At Live Nation Entertainment, our people embrace these qualities, so if this sounds like you then please read on!THE TEAMThe Cyber Defense and Incident Response team operates within the Corporate Information Security and Privacy Organization and are a critical function within Live Nation Entertainment. We specialize in detecting and responding to adverse events within our global network and provide snap response times to mitigate the impact of potential threats.THE ROLEAs Senior Director - Cyber Security Operations, you will provide the first layer of defense by continuously improving current detections through innovative automation techniques that improve detection and response times to intercept and defend against cyberattacks.You will be the subject matter expert in all things related to threat detection and response. Learning how the adversary operates and their key objectives is imperative to protecting and defending against damage to mission-critical systems. Detecting these precursors allows the team to respond quickly to reduce the risk to the organization.You will work with a team that shares a common goal: continuously improving threat detection and response by building a strong team of SMEs who share ownership of the mission and the duty to protect the global organization.We are growing our team to provide threat detection and incident response capabilities for Live Nation Entertainment; this is an exciting time to join!WHAT THIS ROLE WILL DOPrepare, detect, respond and mitigate against cyber threats, protecting Live Nation Entertainment data and assets utilizing industry information security best practicesLead a geographically dispersed team of technical detection and response analysts who are responsible for monitoring, detecting, triaging, and responding to security events and incidents in Live Nation Entertainment’s 24x7 global networkImplementation of detection methodologies with a solid understanding of how to baseline network traffic and monitor for anomalous activity for early detection and mitigationResponsible for all management activities related to the Threat Detection and Response team’s operations including people management, training, and mentoring of direct reportsLeverage automation and orchestration solutions to automate repetitive tasksNetwork, collaborate, and engage multiple internal and external teams and subject matter experts to address cybersecurity issues to reduce overall organizational riskContribute to and support team projects and strategic initiatives, including improving current workflows and processes to mature our monitoring and response capabilitiesAssist with incident response as events are escalated to include threat hunting, data collection/analysis, triage, containment, remediation, and documentationChampion process documentation and lessons learned to improve team efficiency and consistency for scalable response operations to ensure continuous improvement of internal playbooksDevelop and deliver metrics that measure the team’s efficiency and effectiveness to leadershipManage career development for team members, including training and mentoring, conducting performance reviews and exhibiting behaviors to be modeled by team membersDrive a culture of inclusiveness and team unity to deliver exceptional customer service within the team and to our partner teamsResearch and stay current on the latest trends, best practices, and technology developmentsParticipate in on-call weekly rotations with other team members (Required)WHAT THIS PERSON WILL BRING - REQUIRED8+ years of Information Technology experienceMember of a Security Operations Center (SOC)Security Incident Response Analyst or supporting function (2 years minimum)eDiscovery or related role performing forensic functions6+ years of people management experience2+ years of Information Security and Incident Response or similar discipline2+ years of Linux/Unix, Mac and Windows system analysis experienceTechnical Cyber Security Certification(s) required (min. 1): GCED, GCDA, GDAT etc.BA/BS in Computer Science, Information Security, or Information Systems or equivalent related work experienceExperience working in a large enterprise and management of a wide range of security tools such as IDS/IPS (network and host), advanced anti-malware (network and endpoint), DLP, encryption, anti-virus, firewalls, identity management, NAC, etc.Familiarity with security standards NIST Cyber Security Framework, NIST SP800-61 R2 and ISO/IEC 27035Experience with threat modeling concepts such as threat indicators, threats actors and attack surfacesUnderstanding of network architecture and security infrastructure placementExperience with SIEM technologies (i.e. ArcSight, Splunk, Elk Stack)In-depth technical knowledge of Windows and Unix/Linux based operating systemsTravel is at a minimum, but some domestic and international travel is requiredMust be willing to be available 24x7 during weekly on-call rotationsMust be willing to work non-traditional hours which may occur over weekends and holidays in support of incidents as neededExceptional ability to remain calm under stressMust be able to pass a criminal background check and a U.S. government security clearance if requestedWHAT THIS PERSON WILL BRING - TECHNICAL SKILLSIdentify and understand how malware and threat actors operate at a functional level, as well as understanding their main objectives, to reduce the potential spread and impactDemonstrate knowledge of relevant data sources to log in the SIEMUtilize threat detection and other tools to analyze event logs to prevent and detect adversary attacksExperience with containment, eradication, and remediation while preserving forensic artifacts for analysisPractical level of understanding of security benchmarks and hardening of devices to reduce their attack surface, both physical and cloud devicesInnovative Content Development. Develop detection rules that perform aggregate and correlated activity detections across the security stack leveraging API automation integrationsExperience with escalating and participating in small- and large-scale incident response activities to include threat hunting, containment, and remediationTechnical Savvy. Must be able to design and implement dashboards, reports and queries using various query and scripting languagesAbility to reverse engineer how a network or endpoint was compromised to develop new detections to prevent future attacks of the sameConsistent and proven ability to generate well-organized notes at a high-level and ability to document timelines of events and incidents in the internal ticketing systemWHAT THIS PERSON WILL BRING - BEHAVIORS AND SKILLSStrong sense of moral character, high-ethical standards, servant-leader and accountabilityVery strong leadership skills with the ability to maintain team composure during times of high stressHighly meticulous with exceptional attention to detailAnalytical and strategic mindset to overcome obstacles and solve complex problemsHave a global mind-set for working with different cultures and backgroundsStrong organizational and time-management skills with the ability to complete tasks assigned in a timely mannerAbility to develop team projects and execute strategic initiatives to completionStrong negotiation, influence, mediation & conflict management skillsEmbraces mentorship, knowledge sharing and teaming skillsExcellent English written and verbal communication skills, additional languages is a plusExcellent customer service skills requiredFlexible and responsive to changing situationsSelf-driven, self-disciplined to perform tasks and complete projects with little to no supervision, with a high sense of dutyThis job description is a summary of duties that are expected to be performed. Duties outlined in this job description may not be all-inclusive and can be modified at any time if requested by management.BENEFITS & PERKSOur motto is ‘Taking Care of Our Own’ through 6 pillars of benefits:HEALTH : Medical, vision, dental and mental health benefits for you and your family, with access to a health care concierge, and Flexible or Health Savings Accounts (FSA or HSA)YOURSELF : Free concert tickets, generous paid time off including paid holidays, sick time, and personal daysWEALTH : 401(k) program with company match, stock reimbursement programFAMILY : New parent programs including caregiver leave and baby bonuses, plus fertility, adoption, foster, or surrogacy supportCAREER : Career and skill development programs with School of Live, tuition reimbursement, and student loan repaymentOTHERS : Volunteer time off, crowdfunding matchEQUAL EMPLOYMENT OPPORTUNITYWe aspire to build teams that reflect and support the fans and artists we serve. Every day we aim to promote environments where everyone can be themselves, contribute fully, and thrive within our company and at our events. As a growing business we will encourage you to develop your professional and personal aspirations, enjoy new experiences, and learn from the talented people you will be working with.Live Nation strongly supports equal employment opportunity for all applicants regardless of age (40 and over), ancestry, color, religious creed (including religious dress and grooming practices), family and medical care leave or the denial of family and medical care leave, mental or physical disability (including HIV and AIDS), marital status, domestic partner status, medical condition (including cancer and genetic characteristics), genetic information, military and veteran status, political affiliation, national origin (including language use restrictions), citizenship, race, sex (including pregnancy, childbirth, breastfeeding and medical conditions related to pregnancy, childbirth or breastfeeding), gender, gender identity, and gender expression, sexual orientation, intersectionality, or any other basis protected by applicable federal, state or local law, rule, ordinance or regulation.We will consider qualified applicants with criminal histories in a manner consistent with the requirements of the Los Angeles Fair Chance Ordinance, San Francisco Fair Chance Ordinance and the California Fair Chance Act and consistent with other similar and / or applicable laws in other areas.We also afford equal employment opportunities to qualified individuals with a disability. For this reason, Live Nation will make reasonable accommodations for the known physical or mental limitations of an otherwise qualified individual with a disability who is an applicant consistent with its legal obligations to do so, including reasonable accommodations related to pregnancy in accordance with applicable local, state and / or federal law. As part of its commitment to make reasonable accommodations, Live Nation also wishes to participate in a timely, good faith, interactive process with a disabled applicant to determine effective reasonable accommodations, if any, which can be made in response to a request for accommodations. Applicants are invited to identify reasonable accommodations that can be made to assist them to perform the essential functions of the position they seek. Any applicant who requires an accommodation in order to perform the essential functions of the job should contact a Human Resources Representative to request the opportunity to participate in a timely interactive process. Live Nation will also provide reasonable religious accommodations on a case-by-case basis.HIRING PRACTICESThe preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job.Live Nation recruitment policies are designed to place the most highly qualified persons available in a timely and efficient manner. Live Nation may pursue all avenues available, including promotion from within, employee referrals, outside advertising, employment agencies, internet recruiting, job fairs, college recruiting and search firms.#LI-EF1#LI-REMOTEUNITEDSTATES-The expected compensation for this position is:$188,000.00 USD - $235,000.00 USD** Pay is based on a number of factors including market location, qualifications, skills, and experience.Live Nation Entertainment will never request payment or equipment purchases as part of the hiring process. Recruiters will only contact candidates from official Live Nation or affiliated brand email domains. #J-18808-Ljbffr Live Nation