> Markdown version of [/jobs/ext/2016588-advanced-cyber-threat-response-forensics-lead-manager](https://www.wearedevelopers.com/jobs/ext/2016588-advanced-cyber-threat-response-forensics-lead-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Advanced Cyber Threat Response & Forensics Lead/Manager

- **Company:** Deloitte T.T.L.
- **Location:** San Francisco, CA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cyber Threat Analysis, Cyber Warfare
- **Published:** August 10, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/advanced-cyber-threat-response-and-forensics-lead-manager-san-francisco-ca-usa-58887751

## About the Role

aaaB_ teams to enable effective delivery * Champion development of Cyber Defense & Resilience offerings in Crisis & Incident Response and Technical Resilience * Drive continuous improvement of monitoring and delivery using industry practices and tools * Provide thought leadership and training, contribute to security awareness initiatives Tasks * 10+ years of hands-on experience in Cyber Defense & Resilience, including incident response and cyber transformation programs * BS/BA degree * Limited visa sponsorship may be available * Ability to travel up to 50% depending on engagements Key requirements *

## Description

Experteer Overview In this role you will lead and mature the Cyber Incident Response program within Deloitte's Cyber Defense and Resilience team. You'll drive readiness, response, and recovery for clients, integrating solutions and services that advance crisis management and technical resilience. You will oversee engagements end-to-end, guide cross-functional teams, and champion Deloitte's Crisis & Incident Response offerings. The position involves global team mentorship and significant client-facing impact, with travel and leadership responsibilities. Compensation / Benefits * Lead full lifecycle of cyber incident response engagements (investigation, containment, remediation, recovery) * Prepare incident reports and client communications with high clarity and accuracy * Define and enhance Crisis & Incident Response solutions aligned with ISO 27001, NIST, and CIS * Identify opportunities to optimize incident monitoring, detection, and response processes * Manage and mentor US and US-India teams to enable effective delivery * Champion development of Cyber Defense & Resilience offerings in Crisis & Incident Response and Technical Resilience * Drive continuous improvement of monitoring and delivery using industry practices and tools * Provide thought leadership and training, contribute to security awareness initiatives Tasks * 10+ years of hands-on experience in Cyber Defense & Resilience, including incident response and cyber transformation programs * BS/BA degree * Limited visa sponsorship may be available * Ability to travel up to 50% depending on engagements Key requirements *


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Real-world Threat Modeling](https://www.wearedevelopers.com/videos/936-real-world-threat-modeling)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter)
- [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)