Cyber Incident Response Engineer - Automation & Forensics

ASM Research, An Accenture Federal Services Company; Little Rock (AR); On-site; USD 67,000 - 82,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, is seeking a Cybersecurity Incident Response Engineer, Mid, to lead detection, containment, and recovery of cybersecurity incidents across enterprise networks and mission‑critical systems in a regulated government environment.

You will develop response playbooks, automate triage, coordinate with infrastructure and app teams, perform forensics, and map attacker behavior to MITRE ATT&CK to drive improvements in SOC capabilities and incident

Qualifications

• Typically 4–7 years of hands-on cybersecurity operations and incident response.
• Bachelor’s degree in IT, Cybersecurity, Computer Science, or related field, or equivalent work experience.
• Demonstrated experience with incident response tools such as SIEM, IDS/IPS, and EDR in enterprise environments.
• Strong understanding of incident response principles, containment and eradication techniques, and data security best practices.
• Proven analytical and problem-solving ability with strong written and verbal communication skills.

Responsibilities

• Analyze security events and incidents using SIEM, IDS/IPS, and EDR.
• Develop and refine incident response runbooks and automation workflows that standardize triage, containment, and eradication steps for common attack scenarios.
• Coordinate system and network isolation strategies with infrastructure and application teams to contain threats while preserving evidence and minimizing operational disruption.
• Support proactive defensive engineering initiatives, including tuning detections and building automated countermeasures.
• Perform host and network forensics to support root cause analysis and regulatory needs.

Skills

SIEM

EDR

Incident response

Cybersecurity operations

Communication skills

Education

Bachelor's degree

Job description

ASM Research, An Accenture Federal Services Company, is seeking a Cybersecurity Incident Response Engineer, Mid, to lead detection, containment, and recovery of cybersecurity incidents across enterprise networks and mission‑critical systems in a regulated government environment.

You will develop response playbooks, automate triage, coordinate with infrastructure and app teams, perform forensics, and map attacker behavior to MITRE ATT&CK to drive improvements in SOC capabilities and incident