> Markdown version of [/jobs/ext/2016183-advanced-cyber-threat-response-forensics-lead-manager](https://www.wearedevelopers.com/jobs/ext/2016183-advanced-cyber-threat-response-forensics-lead-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Advanced Cyber Threat Response & Forensics Lead/Manager

- **Company:** Deloitte T.T.L.
- **Location:** McLean, VA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cyber Threat Analysis, Cyber Warfare
- **Published:** August 10, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/advanced-cyber-threat-response-and-forensics-lead-manager-mclean-va-usa-58887745

## About the Role

response, and recovery * Identify opportunities for process optimization in incident monitoring, detection, and response * Manage and mentor teams across US and US-India to ensure effective delivery * Champion development of Deloitte's Cyber Defense & Resilience market offerings related to crisis, incident response and technical resilience * Drive continuous improvement of monitoring, delivery, and reliability of services * Provide thought leadership and training on industry practices and contribute to security awareness initiatives Tasks * 10+ years of hands-on experience in Cyber Defense & Resilience, including incident response and cyber transformation programs * BS/BA degree * Limited visa sponsorship may be available * Ability to travel up to 50% depending on client needs Key requirements *

## Description

Experteer Overview In this role you will lead and align cyber incident response efforts within Deloitte's Cyber Defense and Resilience team, guiding Readiness, Response and Recovery for client crises. You will design, deploy and improve incident response solutions and services, acting as an internal integrator to advance Crisis & Incident Response and Technical Resilience offerings. You will champion high-quality engagements, mentor cross-border teams, and drive continuous improvement of monitoring and response capabilities. This role offers impact at scale in helping clients achieve secure, resilient operations. Compensation / Benefits * Lead full lifecycle of cyber incident response engagements including investigations, containment, remediation, and recovery * Prepare incident reports, technical documentation, and client communications with clarity and accuracy * Design and enhance Crisis & Incident Response solutions aligned with ISO 27001, NIST, CIS standards to improve readiness, response, and recovery * Identify opportunities for process optimization in incident monitoring, detection, and response * Manage and mentor teams across US and US-India to ensure effective delivery * Champion development of Deloitte's Cyber Defense & Resilience market offerings related to crisis, incident response and technical resilience * Drive continuous improvement of monitoring, delivery, and reliability of services * Provide thought leadership and training on industry practices and contribute to security awareness initiatives Tasks * 10+ years of hands-on experience in Cyber Defense & Resilience, including incident response and cyber transformation programs * BS/BA degree * Limited visa sponsorship may be available * Ability to travel up to 50% depending on client needs Key requirements *


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)