Lead Detection and Response Analyst
Farringdon, London, United Kingdom
⚠️ We'll shut down after Aug 1st - try foo🦍 for all jobs in tech ⚠️
Live Nation Entertainment
Job Summary:
Who are we?
Live Nation Entertainment is the world’s leading live entertainment and eCommerce company, comprised of four market leaders: Ticketmaster.com, Live Nation Concerts, Front Line Management Group and Live Nation Network. Ticketmaster.com is the global event ticketing leader and one of the world’s top five eCommerce sites, with over 26 million monthly unique visitors. Live Nation Concerts produces over 20,000 shows annually for more than 2,000 artists globally. Front Line is the world’s top artist management company, representing over 250 artists. These businesses power Live Nation Network, the leading provider of entertainment marketing solutions, enabling over 800 advertisers to tap into the 200 million consumers Live Nation delivers annually through its live event and digital platforms. For additional information, visit www.livenation.com/investors.
Who are you?
Passionate and motivated. Driven, with an entrepreneurial spirit. Resourceful, innovative, forward thinking and committed. At Live Nation Entertainment, our people embrace these qualities, so if this sounds like you then please read on!
As a UK/EMEA Lead DART Analyst, you will serve as the bridge between frontline analysts and DART management, helping guide real-time incident response, providing mentorship and quality assurance across shifts, and contributing to process development and strategic improvement. You will lead shift operations, act as an escalation point for complex investigations, and ensure consistent application of incident response processes across global teams.
Key Responsibilities
Operational Leadership
● Coordinate daily DART shift activities to ensure smooth operations and adequate coverage.
● Act as an escalation point for high-priority security alerts and investigations.
● Act as an Incident Commander to ensure the incident investigation process is streamlined and completed from start to finish.
● Conduct QA reviews on tickets to ensure accuracy, completeness, and adherence to IR procedures.
● Lead shift handovers, ensuring continuity and communication across regions.
● Monitor and triage security alerts using SIEM, EDR, and NDR platforms.
● Perform in-depth investigations into potential threats, applying TTP-based analysis and leveraging internal tools.
● Collaborate with business units and technical teams during incident response to gather context and execute containment or remediation.
● Provide structured documentation and recommendations post-incident.
Team Support & Development
● Mentor junior and mid-level analysts during investigations and incident response.
● Support onboarding and continuous training through documentation, coaching, and hands-on guidance.
● Promote a culture of collaboration, accountability, and continuous improvement across shifts.
Process & Tooling Contribution
● Help identify tooling or workflow gaps; provide recommendations to the Defense and Response Team/Detection and Response Enginnering Manager for improvements.
● Contribute to the creation and refinement of playbooks and operational procedures.
● Participate in tuning detection content and use-case development in partnership with threat detection teams.
Reporting & Metrics
● Assist in tracking key performance indicators (Time to Detect, Time to Resolve, Escalation Ratios, etc.).
● Support reporting functions by summarizing incidents and shift activities in alignment with team OKRs.
Required Qualifications
● Bachelor's degree (or higher) in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field and/or 5+ years of experience in a cybersecurity analyst role, with at least 2 years in a lead or senior-level capacity.
● Proven hands-on experience with SIEM, EDR, NDR, and DFIR toolsets.
● In-depth understanding of attacker TTPs (MITRE ATT&CK) and strong investigative mindset.
● Experience responding to incidents in cloud environments (AWS, Azure, GCP).
● Excellent written and verbal communication skills, especially in cross-functional and high-pressure scenarios.
● Ability to guide and inspire analysts of varying experience levels.
Equal Opportunities
We are passionate and committed to our people and go beyond the rhetoric of diversity and inclusion. You will be working in an inclusive environment and be encouraged to bring your whole self to work. We will do all that we can to help you successfully balance your work and homelife. As a growing business we will encourage you to develop your professional and personal aspirations, enjoy new experiences, and learn from the talented people you will be working with. It’s talent that matters to us and we encourage applications from people irrespective of their gender identity, race, sexual orientation, religion, age, disability status or caring responsibilities.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: AWS Azure Cloud Computer Science DART DFIR E-commerce Ecommerce EDR Forensics GCP Incident response MITRE ATT&CK OKR SIEM Threat detection TTPs
Perks/benefits: Career development
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.