Cybersecurity Incident Response Engineer: Defend & Recover

ASM Research, An Accenture Federal Services Company; Montpelier (VT); On-site; USD 67,000 - 82,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, seeks a Mid-level Cybersecurity Incident Response Engineer to drive detection, containment, and recovery across enterprise networks in a government‑regulated environment.

You will develop runbooks, automate response workflows, and coordinate with infrastructure and apps teams to isolate threats while preserving evidence and continuity of operations.

Qualifications

• Typically 4–7 years of hands‑on cybersecurity operations and incident response experience.
• Bachelor’s degree in IT, Cybersecurity, Computer Science, or equivalent work experience.
• Demonstrated experience with incident response tools such as SIEM, IDS/IPS, and EDR in enterprise environments.
• Strong understanding of incident response principles, containment and eradication techniques, and data security best practices.
• Proven analytical and problem‑solving ability with strong written and verbal communication.

Responsibilities

• Conduct technical analysis of security events and incidents using SIEM, IDS/IPS, EDR to identify attack vectors and affected assets.
• Develop and refine incident response runbooks and automation workflows that standardize triage, containment, and eradication steps.
• Coordinate system and network isolation strategies with infrastructure and application teams to contain threats.
• Support proactive defensive engineering initiatives, including tuning detections and automated countermeasures.
• Perform host and network forensics to support root cause analysis and regulatory needs.
• Map observed adversary behavior to MITRE ATT&CK to guide targeted detection improvements.
• Ensure incident handling aligns with data security best practices and government policies for auditability.
• Produce incident timelines and lessons learned for security awareness and process improvements.

Skills

Analytical skills

Problem-solving

Written communication

Verbal communication

Education

Bachelor’s degree in IT/Cybersecurity/CS or equivalent

Tools

SIEM

IDS/IPS

EDR

Job description

ASM Research, An Accenture Federal Services Company, seeks a Mid-level Cybersecurity Incident Response Engineer to drive detection, containment, and recovery across enterprise networks in a government‑regulated environment.

You will develop runbooks, automate response workflows, and coordinate with infrastructure and apps teams to isolate threats while preserving evidence and continuity of operations.