> Markdown version of [/jobs/ext/2011344-advanced-cyber-threat-response-forensics-lead-manager](https://www.wearedevelopers.com/jobs/ext/2011344-advanced-cyber-threat-response-forensics-lead-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Advanced Cyber Threat Response & Forensics Lead/Manager

- **Company:** Deloitte T.T.L.
- **Location:** Raleigh, NC, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cyber Threat Analysis, Cyber Warfare
- **Published:** August 10, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/advanced-cyber-threat-response-and-forensics-lead-manager-raleigh-nc-usa-58887737

## About the Role

process optimization in monitoring, detection, and response * Supervise and mentor US and US-India team; foster high performance and collaborative delivery * Champion development of Deloitte's Crisis & Incident Response and Technical Resilience offerings * Drive continuous improvement through industry practices and technology-based tools * Provide thought leadership and training; contribute to requirements evaluation and security awareness initiatives Tasks * 10+ years of hands-on experience in Cyber Defense & Resilience, including incident response, cyber resilience, and cyber transformation programs * BS/BA degree * Limited visa sponsorship may be available * Ability to travel up to 50% depending on client and project needs Key requirements *

## Description

Experteer Overview In this role you will lead Cyber Incident Response engagements within Deloitte's Cyber Defense & Resilience team, shaping readiness, response, and recovery for clients during crises. You will drive the design and deployment of solutions that advance Crisis & Incident Response and Technical Resilience offerings, while acting as an internal integrator across teams. Expect to supervise US and US-India staff, mentor talent, and push continuous improvement in detection and response. This is a mission-driven opportunity to help clients achieve secure, reliable operations at scale. Compensation / Benefits * Lead full lifecycle of cyber incident response engagements (investigations, containment, remediation, recovery) * Prepare incident reports, technical documentation, and client communications with high clarity and accuracy * Enhance Crisis & Incident Response solutions based on ISO 27001, NIST, CIS; advance readiness, response, and recovery * Identify opportunities for process optimization in monitoring, detection, and response * Supervise and mentor US and US-India team; foster high performance and collaborative delivery * Champion development of Deloitte's Crisis & Incident Response and Technical Resilience offerings * Drive continuous improvement through industry practices and technology-based tools * Provide thought leadership and training; contribute to requirements evaluation and security awareness initiatives Tasks * 10+ years of hands-on experience in Cyber Defense & Resilience, including incident response, cyber resilience, and cyber transformation programs * BS/BA degree * Limited visa sponsorship may be available * Ability to travel up to 50% depending on client and project needs Key requirements *


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter)
- [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management)
- [Real-world Threat Modeling](https://www.wearedevelopers.com/videos/936-real-world-threat-modeling)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)