> Markdown version of [/jobs/ext/1387584-advanced-cyber-threat-response-forensics-lead-manager](https://www.wearedevelopers.com/jobs/ext/1387584-advanced-cyber-threat-response-forensics-lead-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Advanced Cyber Threat Response & Forensics Lead/Manager

- **Company:** Deloitte T.T.L.
- **Location:** Boise, ID, United States
- **Experience:** Expert
- **Salary:** $134,500.0 - $265,100.0
- **Contract:** Permanent contract
- **Skills:** Cyber Threat Analysis, Cybercrime, Cyber Warfare
- **Published:** July 22, 2026
- **Apply:** https://dejobs.org/x/x/3ABF8F8F01204BEB8F29DDF222F17F76/job/

## About the Role

Required:

 * 10+ years of hands-on experience on Cyber Defense & Resilience solutions, including but not limited to cyber incident response, cyber resilience, and initiating / leading cyber transformation programs.
 * BS/BA degree
 * Limited visa sponsorship may be available
 * Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve

## Description

We are seeking an experienced professional to join our Cyber Defense and Resilience team, who will have extensive experience in Cyber Incident Response. This role involves supporting our client teams in defining, delivering and improving their Cyber Incident Response program to be able to support client's Readiness, Response, and Recovery from Cyber incidents or other crises and events. The candidate will also act as an integrator and champion internally and drive the definition, design, and deployment of solutions and services to advance Deloitte Cyber's Crisis & Incident Response and Technical Resilience offerings.

Responsibilities

Experience in leading the full lifecycle of Cyber incident response, manage and execute incident response engagements for clients, including investigations, containment, remediation, and recovery activities. Review deliverables and coordinate technical sessions to ensure high-quality service and Prepare incident reports, technical documentation, and client communications; maintain high standards for clarity and accuracy.

Create and enhance client's Crisis & Incident Response solutions based on industry standards such as ISO 27001, NIST, and CIS to advance Cyber incident readiness, response and recovery utilizing various related technologies. Identify opportunities for process optimization and continuous improvement in incident monitoring, detection, and response.

 * Team Management: Strong leadership and team management skills. Supervise and mentor team members (US and US-India), fostering skills development, high performance, and collaborative delivery.
 * Champion Cyber Crisis & Incident Response Solutions: Champion the development of Deloitte's Cyber Defense & Resilience market offerings around Crisis & Incident Response and Technical Resilience, ensuring alignment with industry best practices, leading technologies, and evolving client needs related to risk and threats.
 * Drive Continuous Improvement: Utilize industry-leading practices and technology-based tools or methodologies to enhance the monitoring, delivery, and reliability of Deloitte Cyber's services provided to clients.
 * Offer Thought Leadership and Training: Provide guidance on industry leading practices for development, while participating in the evaluation of new requirements. Contribute to the development of security awareness and training initiatives as necessary.
 * Manage and Mentor Teams: Lead and mentor a US and US-India team, ensuring the effective delivery of technology risk management services and capabilities


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)