Cybersecurity Incident Response Engineer - Automation & Defense

ASM Research, An Accenture Federal Services Company; Carson City (NV); On-site; USD 67,000 - 82,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, seeks a Mid-level Cybersecurity Incident Response Engineer to support detection, containment, and recovery of incidents across enterprise networks in a regulated government environment. You will help develop response strategies, automate workflows, and strengthen SOC capabilities.

The role requires hands-on incident handling, forensics, and collaboration with cross-functional teams to preserve evidence and ensure regulatory alignment.

Qualifications

• 4–7 years hands-on experience in cybersecurity operations and incident response.
• Bachelor’s degree in IT, Cybersecurity, Computer Science, or related field, or equivalent work experience.
• Experience with incident response tools and platforms such as SIEM, IDS/IPS, and EDR in enterprise environments.
• Strong understanding of incident response principles, containment and eradication techniques, and data security best practices.

Responsibilities

• Conduct technical analysis of security events and incidents using SIEM, IDS/IPS, EDR to identify attack vectors, assets, and data exposure.
• Develop and refine incident response runbooks and automation workflows that standardize triage, containment, and eradication steps.
• Coordinate system and network isolation strategies with infrastructure and application teams to contain threats with minimal disruption and preserve evidence.
• Support proactive defensive engineering initiatives, including tuning detections and building automated countermeasures.
• Perform host and network forensics, including log review and basic memory/disk analysis to support root cause analysis and compliance needs.
• Map observed adversary behavior to MITRE ATT&CK to understand techniques and improve detections.
• Ensure incident handling aligns with data security best practices and applicable government security policies.

Skills

Incident response experience

Analytical thinking

Communication skills

Education

Bachelor's degree or equivalent experience

Tools

SIEM

IDS/IPS

EDR

Job description

ASM Research, An Accenture Federal Services Company, seeks a Mid-level Cybersecurity Incident Response Engineer to support detection, containment, and recovery of incidents across enterprise networks in a regulated government environment. You will help develop response strategies, automate workflows, and strengthen SOC capabilities.

The role requires hands-on incident handling, forensics, and collaboration with cross-functional teams to preserve evidence and ensure regulatory alignment.