Cyber Incident Response Engineer (Mid) – Accelerate Containment

ASM Research, An Accenture Federal Services Company; Springfield (IL); On-site; USD 67,000 - 82,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, is seeking a Mid-level Cybersecurity Incident Response Engineer to join our government-focused security program. You will analyze security events, coordinate containment, and help automate response playbooks across enterprise networks and mission-critical systems.

This role emphasizes collaboration with infrastructure and application teams, development of runbooks, forensics support, and alignment with government security policies.

Qualifications

• Required: typically 4–7 years of hands-on cybersecurity operations and incident response.
• Bachelor’s degree in IT, Cybersecurity, Computer Science, or a related field, or equivalent work experience.
• Demonstrated experience with incident response tools and platforms such as SIEM, IDS/IPS, and EDR in enterprise environments.
• Strong understanding of incident response principles, containment and eradication techniques, and data security best practices.
• Proven analytical and problem‑solving ability with strong written and verbal communication skills.

Responsibilities

• Conduct technical analysis of security events and incidents using SIEM, IDS/IPS, EDR, and related tools to identify attack vectors, affected assets, and potential data exposure.
• Develop and refine incident response runbooks and automation workflows that standardize triage, containment, and eradication steps for common attack scenarios.
• Coordinate system and network isolation strategies with infrastructure and application teams to contain threats while preserving evidence and minimizing operational disruption.
• Support proactive defensive engineering initiatives, including tuning detections, building automated countermeasures, and contributing to programs designed to defend against sophisticated adversaries.
• Perform host and network forensics, including log review, basic memory and disk analysis, and artifact collection to support root cause analysis and potential legal or compliance needs.
• Map observed adversary behavior to structured frameworks such as MITRE ATT&CK to understand attacker tactics, techniques, and procedures and to recommend targeted detection improvements.
• Ensure incident handling practices are aligned with data security best practices and applicable government security policies, supporting auditability and regulatory compliance.
• Produce clear incident documentation, timelines, and lessons learned that feed into security awareness, control hardening, and process improvements.

Skills

Cybersecurity operations

Incident response

Scripting/automation

Communication skills

Education

Bachelor’s degree in IT, Cybersecurity, Computer Science, or related field

Tools

SIEM

IDS/IPS

EDR

Job description

ASM Research, An Accenture Federal Services Company, is seeking a Mid-level Cybersecurity Incident Response Engineer to join our government-focused security program. You will analyze security events, coordinate containment, and help automate response playbooks across enterprise networks and mission-critical systems.

This role emphasizes collaboration with infrastructure and application teams, development of runbooks, forensics support, and alignment with government security policies.