> Markdown version of [/jobs/ext/2538755-lead-security-operations-center-soc-analyst](https://www.wearedevelopers.com/jobs/ext/2538755-lead-security-operations-center-soc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead Security Operations Center (SOC) Analyst - **Company:** Live Nation Entertainment, Inc. - **Location:** Las Vegas, NV, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cyber Security, Internet Recruiting, Information Systems Security Architecture Professional, Security Information and Event Management, Google Cloud, Cloud Platform System, Mitre Att&ck, Dart - **Published:** August 1, 2026 - **Apply:** https://www.careerjet.com/job/usaef69cc3c0c3e4e6adde91f431df1732/eaa ## About the Role 5+ years of experience in a cybersecurity analyst role, with at least 2 years in a lead or senior-level capacity. Proven hands-on experience with SIEM, EDR, NDR, and DFIR toolsets. In-depth understanding of attacker TTPs (MITRE ATT&CK) and strong investigative mindset. Experience responding to incidents in cloud environments (AWS, Azure, GCP). Excellent written and verbal communication skills, especially in cross-functional and high-pressure scenarios. Ability to guide and inspire analysts of varying experience levels. Ability to work 9:00AM-5:00PM EST/CST/PST Additional Expectations Participate in a 24/7 on-call rotation Demonstrate flexibility and ownership during incidents and surge periods. Collaborate closely with the DART Manager on planning, capacity tracking, and continuous team improvement. Preferred Certifications At least two of the following (or equivalent experience): GIAC Security Expert (GSE) GIAC Certified Incident Handler (GCIH) GIAC Certified Intrusion Analyst (GCIA) GIAC Certified Incident Handler (GCIH) GIAC Certified Intrusion Analyst (GCIA) CompTIA Cybersecurity Analyst (CySA+) OSCP - Offensive Security Certified Professional CISSP - Certified Information Systems Security Professional Microsoft Certified: Cybersecurity Architect Expert or AWS Certified Security ## Description As a US Lead Security and Operations (SOC) Analyst, you will serve as the bridge between frontline analysts and DART management, helping guide real-time incident response, providing mentorship and quality assurance across shifts, and contributing to process development and strategic improvement. You will lead shift operations, act as an escalation point for complex investigations, and ensure consistent application of incident response processes across global teams. WHAT THIS ROLE WILL DO Operational Leadership Coordinate daily DART shift activities to ensure smooth operations and adequate coverage. Act as an escalation point for high-priority security alerts and investigations. Conduct QA reviews on tickets to ensure accuracy, completeness, and adherence to IR procedures. Lead shift handovers, ensuring continuity and communication across regions. Incident Response Monitor, query, and triage security alerts using SIEM, EDR, and NDR platforms. Perform in-depth investigations into potential threats, applying TTP-based analysis and leveraging internal tools. Collaborate with business units and technical teams during incident response to gather context and execute containment or remediation. Provide structured documentation and recommendations post-incident. Team Support & Development Mentor junior and mid-level analysts during investigations and incident response. Support onboarding and continuous training through documentation, coaching, and hands-on guidance. Promote a culture of collaboration, accountability, and continuous improvement across shifts. Process & Tooling Contribution Help identify tooling or workflow gaps; provide recommendations to the DART Manager for improvements. Contribute to the creation and refinement of playbooks and operational procedures. Participate in tuning detection content and use-case development in partnership with threat detection teams. Reporting & Metrics Assist in tracking key performance indicators (Time to Detect, Time to Resolve, Escalation Ratios, etc.). Support reporting functions by summarizing incidents and shift activities in alignment with team OKRs. WHAT THIS PERSON WILL BRING, We aspire to build teams that reflect and support the fans and artists we serve. Every day we aim to promote environments where everyone can be themselves, contribute fully, and thrive within our company and at our events. As a growing business we will encourage you to develop your professional and personal aspirations, enjoy new experiences, and learn from the talented people you will be working with. Live Nation is an equal opportunity employer. It hires and promotes employees based on their experience, talent, and qualifications for the job and does not tolerate discrimination toward employees based on age (40 and over), ancestry, color, religious creed (including religious dress and grooming practices), family and medical care leave or the denial of family and medical care leave, mental or physical disability (including HIV and AIDS), marital status, domestic partner status, medical condition (including cancer and genetic characteristics), genetic information, military and veteran status, political affiliation, national origin (including language use restrictions), citizenship, race, sex (including pregnancy, childbirth, breastfeeding and medical conditions related to pregnancy, childbirth or breastfeeding), gender, gender identity, and gender expression, sexual orientation, intersectionality, or any other basis protected by applicable federal, state or local law, rule, ordinance or regulation. We will consider qualified applicants with criminal histories in a manner consistent with the requirements of the Los Angeles Fair Chance Ordinance, San Francisco Fair Chance Ordinance and the California Fair Chance Act and consistent with other similar and / or applicable laws in other areas. Live Nation affords equal employment opportunities to qualified individuals with a disability. For this reason, Live Nation will make reasonable accommodations for the known physical or mental limitations of an otherwise qualified individual with a disability who is an applicant or an employee consistent with its legal obligations to do so. As part of its commitment to make reasonable accommodations, Live Nation also wishes to participate in a timely, good faith, interactive process with a disabled applicant or employee to determine effective reasonable accommodations, if any, which can be made in response to a request for accommodations. Applicants and employees are invited to identify reasonable accommodations that can be made to assist them to perform the essential functions of the position they seek or currently occupy. Any applicant or employee who requires an accommodation in order to perform the essential functions of the job should contact either the hiring manager for the role or a Human Resources representative to request the opportunity to participate in a timely interactive process. HIRING PRACTICES The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job. Live Nation recruitment policies are designed to place the most highly qualified persons available in a timely and efficient manner. Live Nation may pursue all avenues available, including promotion from within, employee referrals, outside advertising, employment agencies, internet recruiting, job fairs, college recruiting and search firms. #LI-RemoteUnitedStates #LI-SM1 #LI-EF1 Live Nation Entertainment will never request payment or equipment purchases as part of the hiring process. Recruiters will only contact candidates from official Live Nation or affiliated brand email domains. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [Dart - a language believed dead, experiences a new bloom](https://www.wearedevelopers.com/videos/442-dart-a-language-believed-dead-experiences-a-new-bloom) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Cloud Run- the rise of serverless and containerization](https://www.wearedevelopers.com/videos/106-cloud-run-the-rise-of-serverless-and-containerization) - [Dart - a language believed dead, experiences a new bloom](https://www.wearedevelopers.com/videos/955-dart-a-language-believed-dead-experiences-a-new-bloom) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)