> Markdown version of [/jobs/ext/2014289-advanced-cyber-threat-response-forensics-lead-manager](https://www.wearedevelopers.com/jobs/ext/2014289-advanced-cyber-threat-response-forensics-lead-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Advanced Cyber Threat Response & Forensics Lead/Manager - **Company:** Deloitte T.T.L. - **Location:** Boston, MA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Cyber Threat Analysis, Cyber Warfare - **Published:** August 10, 2026 - **Apply:** https://us.experteer.com/career/view-jobs/advanced-cyber-threat-response-and-forensics-lead-manager-boston-ma-usa-58887762 ## About the Role for incident monitoring, detection, and response. * Manage, mentor, and develop a US and US-India team to ensure high-quality delivery. * Champion the development of market offerings around Crisis & Incident Response and Technical Resilience, aligned with best practices and evolving client needs. * Drive continuous improvement through industry-leading practices and technology-driven tools. * Provide thought leadership and training, and contribute to security awareness initiatives. Tasks * 10+ years of hands-on experience in Cyber Defense & Resilience, including incident response, cyber resilience, and cyber transformation programs. * BS/BA degree * Limited visa sponsorship may be available * Ability to travel up to 50% depending on client engagements Key requirements * ## Description Experteer Overview In this role, you will lead and enhance the Cyber Incident Response program for clients, guiding Readiness, Response, and Recovery from cyber incidents. You'll integrate and champion Deloitte's Crisis & Incident Response and Technical Resilience offerings, collaborating with cross-functional teams to deliver high-quality, standards-based incident management. You will shape incident response solutions and drive continuous improvement in monitoring and response, contributing to Deloitte's security enablement across industries. Compensation / Benefits * Lead the full lifecycle of cyber incident response engagements, including investigations, containment, remediation, and recovery. * Prepare incident reports, technical documentation, and client communications with clarity and accuracy. * Design and enhance Crisis & Incident Response solutions aligned with ISO 27001, NIST, and CIS to boost readiness, response, and recovery. * Identify opportunities to optimize processes for incident monitoring, detection, and response. * Manage, mentor, and develop a US and US-India team to ensure high-quality delivery. * Champion the development of market offerings around Crisis & Incident Response and Technical Resilience, aligned with best practices and evolving client needs. * Drive continuous improvement through industry-leading practices and technology-driven tools. * Provide thought leadership and training, and contribute to security awareness initiatives. Tasks * 10+ years of hands-on experience in Cyber Defense & Resilience, including incident response, cyber resilience, and cyber transformation programs. * BS/BA degree * Limited visa sponsorship may be available * Ability to travel up to 50% depending on client engagements Key requirements * ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) - [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How Many Jobs Are Available in Technology?](https://www.wearedevelopers.com/magazine/450-how-many-jobs-are-available-in-technology) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)