Devon Ackerman

Devon Ackerman is the Global Head of Digital Forensics and Incident Response (DFIR) at Cybereason, based in Raleigh, NC. Devon leverages over 15 years of experience in cybersecurity, focused on digital forensics and incident response. Throughout his career, Devon has built and managed large scale global incident response teams who have handled over 3,000 engagements, annually. 

Prior to joining Cybereason, Devon led the global DFIR team at Kroll, a financial and risk advisory firm. In this role, Devon and his team investigated various types of cyber incidents, including some of the most complex incidents in the world. These incident types included ransomware, corporate-based espionage, nation state threats, network and cloud intrusion events, and business email compromise. In addition to providing rapid response, Devon’s team also provided preparedness services including threat hunting, executive tabletop exercises, incident response planning, and compromise assessments. He supported clients of all sizes, from small/medium size business to enterprise accounts, liaising closely with law firms, cyber insurance carriers, and brokers. 

Before this, Devon served as a Special Agent in the FBI from 2008 - 2016. During his time in the FBI, Devon held numerous positions including certified senior digital sciences forensics examiner and was promoted to supervisory special agent. In these roles, Devon’s responsibilities involved investigations related to cyber foreign counterintelligence, national security and criminal related network intrusions, large-scale evidence collections, and multi-agency incident response. He coordinated digital forensics-related field operations, both within the US and in conjunction with foreign attaché offices.

Devon received his Bachelors of Science from Champlain College in Computer and Information Systems, as well as his Masters of Science from Champlain College in Digital Forensic Science. He graduated both with Honors. Devon’s certifications include: GIAC Certified Forensic Analyst (GCFA), GIAC Certified Forensic Examiner (GCFE), Certified Forensic Computer Examiner (CFCE), Cyber Investigator Certification Program (CICP), and Certified Computer Examiner (CCE). Devon is also the author of the best selling book “Diving In: An Incident Responders Journey”