> Markdown version of [/jobs/ext/2016571-advanced-cyber-threat-response-forensics-lead-manager](https://www.wearedevelopers.com/jobs/ext/2016571-advanced-cyber-threat-response-forensics-lead-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Advanced Cyber Threat Response & Forensics Lead/Manager

- **Company:** Deloitte T.T.L.
- **Location:** Chicago, IL, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cyber Threat Analysis, Cyber Warfare
- **Published:** August 10, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/advanced-cyber-threat-response-and-forensics-lead-manager-chicago-il-usa-58887761

## About the Role

Crisis * Identify opportunities for process optimization in incident monitoring, detection, and response * Supervise and mentor US and US-India team members * Champion development of Cyber Defense & Resilience offerings in Crisis & Incident Response and Technical Resilience * Drive continuous improvement of monitoring, delivery, and reliability of Deloitte's services * Provide thought leadership and training guidance; contribute to security awareness initiatives * Lead and mentor a US and US-India team to ensure effective delivery of technology risk management services Tasks * 10+ years of hands-on experience in Cyber Defense & Resilience, including cyber incident response and cyber transformation programs * BS/BA degree * Limited visa sponsorship may be available * Ability to travel up to 50% depending on client needs Key requirements *

## Description

Experteer Overview Join Deloitte's Cyber Defense and Resilience team as an experienced cyber incident response expert. You will lead and evolve incident response programs to enable readiness, swift response, and recovery for clients. You will architect and champion Crisis & Incident Response and Technical Resilience offerings, coordinating with cross-functional teams to deliver high-quality, standards-aligned services. This role blends hands-on response leadership with strategic integration and continuous improvement, shaping Deloitte's security risk services at scale. Compensation / Benefits * Lead full lifecycle cyber incident response engagements including investigations, containment, remediation, and recovery * Review deliverables and coordinate technical sessions to ensure high-quality service * Prepare incident reports, technical documentation, and client communications with clarity and accuracy * Enhance Crisis & Incident Response solutions based on ISO 27001, NIST, and CIS standards * Identify opportunities for process optimization in incident monitoring, detection, and response * Supervise and mentor US and US-India team members * Champion development of Cyber Defense & Resilience offerings in Crisis & Incident Response and Technical Resilience * Drive continuous improvement of monitoring, delivery, and reliability of Deloitte's services * Provide thought leadership and training guidance; contribute to security awareness initiatives * Lead and mentor a US and US-India team to ensure effective delivery of technology risk management services Tasks * 10+ years of hands-on experience in Cyber Defense & Resilience, including cyber incident response and cyber transformation programs * BS/BA degree * Limited visa sponsorship may be available * Ability to travel up to 50% depending on client needs Key requirements *


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [How Many Jobs Are Available in Technology?](https://www.wearedevelopers.com/magazine/450-how-many-jobs-are-available-in-technology)