Advanced Cyber Threat Response & Forensics Lead

Advanced Cyber Threat Response & Forensics Lead Deloitte’s Cyber Services help our clients to be secure, vigilant, and resilient in the face of an ever-increasing array of cyber threats and vulnerabilities. Our Cyber Risk practice helps organizations with the management of information and technology risks by delivering end‑to‑end solutions using proven methodologies and tools in a consistent manner. Our services help organizations to address, in a timely manner, pervasive issues such as identity theft, data security breaches, data leakage, cyber security, and system outages across organizations of various sizes and industries with the goal of enabling ongoing, secure, and reliable operations across the enterprise. Recruiting for this role ends on 12/1/2026 Job Summary We are seeking an experienced professional to join our Cyber Defense and Resilience team, who will have extensive experience in Cyber Incident Response. This role involves supporting our client teams in defining, delivering and improving their Cyber Incident Response program to be able to support client’s readiness, response, and recovery from cyber incidents or other crises and events. The candidate will also act as an integrator and champion internally and drive the definition, design, and deployment of solutions and services to advance Deloitte Cyber’s Crisis & Incident Response and Technical Resilience offerings. Responsibilities Experience in leading the full lifecycle of cyber incident response, managing and executing incident response engagements for clients, including investigations, containment, remediation, and recovery activities. Review deliverables and coordinate technical sessions to ensure high‑quality service, and prepare incident reports, technical documentation, and client communications; maintain high standards for clarity and accuracy. Create and enhance client’s Crisis & Incident Response solutions based on industry standards such as ISO 27001, NIST, and CIS to advance cyber incident readiness, response and recovery utilizing various related technologies. Identify opportunities for process optimization and continuous improvement in incident monitoring, detection, and response. Team management: lead and mentor team members (US and US‑India), fostering skills development, high performance, and collaborative delivery. Champion the development of Deloitte’s Cyber Defense & Resilience market offerings around Crisis & Incident Response and Technical Resilience, ensuring alignment with industry best practices and evolving client needs. Drive continuous improvement: utilize industry‑leading practices and technology‑based tools or methodologies to enhance the monitoring, delivery, and reliability of Deloitte Cyber’s services provided to clients. Offer thought leadership and training: provide guidance on industry‑leading practices for development, while participating in the evaluation of new requirements and contributing to the development of security awareness and training initiatives as necessary. Manage and mentor teams: lead and mentor a US and US‑India team, ensuring the effective delivery of technology risk management services and capabilities. Qualifications 10+ years of hands‑on experience on cyber defense & resilience solutions, including but not limited to cyber incident response, cyber resilience, and initiating/leading cyber transformation programs. Limited visa sponsorship may be available. Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve. The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets, experience and training, licensure and certifications, and other business and organizational needs. A reasonable estimate of the current range is $130,800 to $241,000. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law. #J-18808-Ljbffr Relha LLC