> Markdown version of [/jobs/ext/2015049-advanced-cyber-threat-response-forensics-lead-manager](https://www.wearedevelopers.com/jobs/ext/2015049-advanced-cyber-threat-response-forensics-lead-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Advanced Cyber Threat Response & Forensics Lead/Manager

- **Company:** Deloitte T.T.L.
- **Location:** Mechanicsburg, PA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cyber Threat Analysis, Cyber Warfare
- **Published:** August 10, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/advanced-cyber-threat-response-and-forensics-lead-manager-mechanicsburg-pa-usa-58887749

## About the Role

& Incident Response solutions aligned with ISO 27001, NIST, and CIS * Identify opportunities for process optimization in incident monitoring, detection, and response * Supervise and mentor US and US-India teams to ensure high performance * Champion Deloitte's Crisis & Incident Response and Technical Resilience offerings * Drive continuous improvement in monitoring, delivery, and reliability of services * Provide thought leadership and training on industry best practices and evolving requirements * Contribute to security awareness and training initiatives * Lead and mentor cross-border teams to ensure effective delivery of technology risk management services Tasks * 10+ years of hands-on experience in cyber defense and resilience (including incident response, resilience, and cyber transformation) * BS/BA degree * Limited visa sponsorship may be available * Ability to travel up to 50% depending on client needs Key requirements *

## Description

Experteer Overview In this role you will lead and advance Deloitte's Cyber Incident Response capabilities within the Cyber Defense and Resilience team. You will drive readiness, response, and recovery for client cyber incidents, acting as an integrator across internal teams to design and deploy crisis and incident response solutions. You'll champion market offerings in Crisis & Incident Response and Technical Resilience, while guiding delivery, quality, and continuous improvement across engagements. This is a hands-on leadership role with a strong emphasis on mentoring teams and shaping client-focused security programs. Compensation / Benefits * Lead full lifecycle of cyber incident response engagements for clients (investigation, containment, remediation, recovery) * Review deliverables and coordinate technical sessions to ensure high-quality service * Prepare incident reports, technical documentation, and client communications with clarity and accuracy * Develop and enhance Crisis & Incident Response solutions aligned with ISO 27001, NIST, and CIS * Identify opportunities for process optimization in incident monitoring, detection, and response * Supervise and mentor US and US-India teams to ensure high performance * Champion Deloitte's Crisis & Incident Response and Technical Resilience offerings * Drive continuous improvement in monitoring, delivery, and reliability of services * Provide thought leadership and training on industry best practices and evolving requirements * Contribute to security awareness and training initiatives * Lead and mentor cross-border teams to ensure effective delivery of technology risk management services Tasks * 10+ years of hands-on experience in cyber defense and resilience (including incident response, resilience, and cyber transformation) * BS/BA degree * Limited visa sponsorship may be available * Ability to travel up to 50% depending on client needs Key requirements *


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)