Devon Ackerman

• Over 15 years of experience

• Managed and built large global incident response teams
• Worked on hundreds of complex digital forensics and incident response engagements, including some of the most complex in the world 

Devon Ackerman is the Global Head of Digital Forensics and Incident Response (DFIR) at LevelBlue, based in Raleigh, NC. Devon leverages over 15 years of experience in cybersecurity, focused on digital forensics and incident response. Throughout his career, Devon has built and managed large scale global incident response teams who have handled over 3,000 engagements, annually.

In his role at LevelBlue, Devon is responsible for the development and assembly of high-performing DFIR hybrid consulting teams designed to address complex cyber threats and adapt to rapidly evolving attack vectors both proactively and reactively. He contributes thought leadership based on first-hand knowledge and experience across the cybersecurity landscape through professional writing, public speaking, and contributions to industry publications, with a focus on emerging technologies and observed threats, trends, and tactics. He is also responsible for insights on nation-state actors, organized crime syndicates, and initial access brokers, advising clients on proactive defense strategies and reactive, investigative best practices. Participation with cybersecurity panels, working groups, and at conferences have further highlighted the intersection between modern cybercrime, geopolitical influences, and cutting-edge detection and response technologies. In addition, he is a cyber engagement manager and senior team lead experienced in providing technical liaison facilitation between Law Firms, Corporate Clients, Cyber Insurance Carriers, and others.

Prior to this, Devon served as Global Head of Digital Forensics and Incident Response at Cybereason before it was acquired by LevelBlue in November 2025. 

Earlier in his career, Devon served as a Special Agent in the FBI from 2008 - 2016. During his time in the FBI, Devon held numerous positions including certified senior digital sciences forensics examiner and was promoted to supervisory special agent. In his role as Senior Digital Sciences Examiner on the Computer Analysis Response team (CART), Devon was responsible for examination of digital evidence under a documented quality assurance program that included annual proficiency testing, technical/peer and administrative reviews, and adherence to standard operating procedures. He was also certified and trained to conduct forensic examinations on digital evidence, conduct timeline construction and artifact analysis, author digital evidence opinions, perform search and seizure operations and provide instruction to new field examiners. As Special Agent of National Security Counterintelligence and Cyber Intrusion in the FBI, Devon was responsible for leading cyber-focused and foreign counterintelligence investigations. Cyber investigative responsibilities ranged from national security and criminal-related network intrusions, website defacements (hacktivism), Critical National Asset (CNA) protection, economic espionage, intellectual property rights violations, internet fraud, and violent crimes (i.e., bank robbery, kidnapping, civil rights violations, and violent crimes against children). He is also co-founder of the FBI’s North Carolina Cyber Security and Instruction Working Group (e-SHIELD). In this role, Devon held top secret clearance with SCI and SAP access.

Devon received his Bachelor of Science from Champlain College in Computer and Information Systems, as well as his Masters of Science from Champlain College in Digital Forensic Science. He graduated both with Honors. Since finishing his degree, Devon has participated in several thousand hours of post-graduate continuing education studies and professional training in the fields of Digital Forensic Sciences, Digital Evidence, Incident Response, and Cyber Security. Prior involved in the implementation and organization of the FBI’s Field Instructor Program (FiP), the creation and management of the FBI’s CART digital forensics classroom grading system, as principal course material revision architect and co-author for the Technical Refresh of the FBI’s Digital Evidence Extraction Technician (DExT) two-week course, and as Master of Science in Cybercrime Advisory board member for the University of South Florida.