Cyber Incident Response Engineer — Automation & Forensics

ASM Research, An Accenture Federal Services Company; Cheyenne (WY); On-site; USD 67,000 - 82,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, seeks a Cybersecurity Incident Response Engineer, Mid to join our government-focused security operations team. The role emphasizes detection, containment, and recovery of incidents across enterprise networks and mission-critical systems, with automation and playbook development to speed response.

You will perform forensic analysis, coordinate with infrastructure and application teams, and contribute to advanced defensive initiatives to

Qualifications

• Bachelor’s degree or equivalent work experience in IT, cybersecurity, or CS.
• Hands-on experience with incident response tools such as SIEM, IDS/IPS, and EDR.
• Strong incident response principles, containment, eradication, and data security practices.

Responsibilities

• Conduct technical analysis of security events and incidents using SIEM, IDS/IPS, EDR to identify attack vectors and affected assets.
• Develop and refine incident response runbooks and automation workflows for triage, containment, and eradication.
• Coordinate system and network isolation with infrastructure and application teams to contain threats with minimal disruption.
• Support proactive defensive engineering, including tuning detections and automated countermeasures.
• Perform host and network forensics to support root cause analysis and regulatory needs.
• Map observed adversary behavior to MITRE ATT&CK for targeted detection improvements.
• Ensure incident handling aligns with data security best practices and government policies.
• Produce incident documentation, timelines, and lessons learned for awareness and process improvement.

Skills

Analytical thinking

Problem solving

Written & verbal communication

Experience in cybersecurity operations

Education

Bachelor’s degree or equivalent in IT/Cybersecurity/CS

Equivalent work experience

Tools

SIEM

IDS/IPS

EDR

Forensics tooling

Job description

ASM Research, An Accenture Federal Services Company, seeks a Cybersecurity Incident Response Engineer, Mid to join our government-focused security operations team. The role emphasizes detection, containment, and recovery of incidents across enterprise networks and mission-critical systems, with automation and playbook development to speed response.

You will perform forensic analysis, coordinate with infrastructure and application teams, and contribute to advanced defensive initiatives to