> Markdown version of [/jobs/ext/2015054-advanced-cyber-threat-response-forensics-lead-manager](https://www.wearedevelopers.com/jobs/ext/2015054-advanced-cyber-threat-response-forensics-lead-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Advanced Cyber Threat Response & Forensics Lead/Manager

- **Company:** Deloitte T.T.L.
- **Location:** Huntsville, AL, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cyber Threat Analysis, Cyber Warfare
- **Published:** August 10, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/advanced-cyber-threat-response-and-forensics-lead-manager-huntsville-al-usa-58887764

## About the Role

27001, NIST, and CIS standards * Identify opportunities for process optimization in monitoring, detection, and response * Manage and mentor a US and US-India team to ensure effective delivery * Champion Deloitte's Cyber Defense & Resilience offerings related to Crisis & Incident Response and Technical Resilience * Drive continuous improvement using industry practices and technology-based tools * Offer thought leadership and training; contribute to security awareness initiatives * Evaluate new requirements and support growth in risk management capabilities Tasks * 10+ years of hands-on experience in Cyber Defense & Resilience, including incident response and cyber transformation programs * Bachelor's degree (BS/BA) * Limited visa sponsorship may be available * Ability to travel up to 50% depending on engagements * Demonstrated leadership and ability to manage cross-border teams * Experience leading client engagements and delivering end-to-end IR programs Key requirements *

## Description

Experteer Overview We are seeking an experienced professional to join our Cyber Defense and Resilience team, with deep expertise in Cyber Incident Response. You will help define, deliver, and improve the client cyber incident response program to support readiness, response, and recovery from incidents. You will also drive the design and deployment of solutions that advance Deloitte's Crisis & Incident Response and Technical Resilience offerings. This role combines hands-on IR leadership with coaching and cross-team collaboration to enhance client security postures. Compensation / Benefits * Lead the full lifecycle of cyber incident response engagements, including investigations, containment, remediation, and recovery * Review deliverables and coordinate technical sessions to ensure clarity and high-quality service * Prepare incident reports, technical documentation, and client communications with high accuracy * Develop and enhance Crisis & Incident Response solutions aligned with ISO 27001, NIST, and CIS standards * Identify opportunities for process optimization in monitoring, detection, and response * Manage and mentor a US and US-India team to ensure effective delivery * Champion Deloitte's Cyber Defense & Resilience offerings related to Crisis & Incident Response and Technical Resilience * Drive continuous improvement using industry practices and technology-based tools * Offer thought leadership and training; contribute to security awareness initiatives * Evaluate new requirements and support growth in risk management capabilities Tasks * 10+ years of hands-on experience in Cyber Defense & Resilience, including incident response and cyber transformation programs * Bachelor's degree (BS/BA) * Limited visa sponsorship may be available * Ability to travel up to 50% depending on engagements * Demonstrated leadership and ability to manage cross-border teams * Experience leading client engagements and delivering end-to-end IR programs Key requirements *


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter)
- [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)