Cybersecurity Incident Response Engineer: Automation & Defense

ASM Research, An Accenture Federal Services Company; Richmond (VA); On-site; USD 67,000 - 82,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company seeks a Cybersecurity Incident Response Engineer, Mid to join our enterprise security program. You will analyze security events, coordinate containment, and help develop runbooks and automations to speed response across regulated government networks.

You will map attacker behavior to MITRE ATT&CK, contribute to proactive defenses, perform basic forensics, and document timelines and lessons learned for auditability and improvement.

Qualifications

• 4–7 years hands-on cybersecurity operations and incident response experience.
• Bachelor’s degree in IT, Cybersecurity, Computer Science, or related field, or equivalent work experience.
• Demonstrated experience with incident response tools and platforms such as SIEM, IDS/IPS, and EDR in enterprise environments.
• Strong understanding of incident response principles, containment and eradication techniques, and data security best practices.
• Proven analytical and problem‑solving ability with strong written and verbal communication skills.

Responsibilities

• Conduct technical analysis of security events and incidents using SIEM, IDS/IPS, EDR to identify attack vectors and data exposure.
• Develop and refine incident response runbooks and automation workflows for triage, containment, and eradication.
• Coordinate system and network isolation strategies with infrastructure and application teams.
• Support proactive defensive engineering initiatives, including tuning detections and building automated countermeasures.
• Perform host and network forensics to support root cause analysis and potential compliance needs.
• Map observed adversary behavior to MITRE ATT&CK to guide detection improvements.
• Ensure incident handling aligns with data security best practices and regulatory requirements.
• Produce incident timelines, documentation, and lessons learned for security awareness and process improvement.

Skills

Incident response

Cybersecurity operations

Analytical thinking

Communication skills

Education

Bachelor's degree or equivalent

Tools

SIEM

IDS/IPS

EDR

Job description

ASM Research, An Accenture Federal Services Company seeks a Cybersecurity Incident Response Engineer, Mid to join our enterprise security program. You will analyze security events, coordinate containment, and help develop runbooks and automations to speed response across regulated government networks.

You will map attacker behavior to MITRE ATT&CK, contribute to proactive defenses, perform basic forensics, and document timelines and lessons learned for auditability and improvement.