Cybersecurity Incident Response Engineer (Mid)

ASM Research, An Accenture Federal Services Company; Annapolis (MD); On-site; USD 67,000 - 82,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, seeks a Cybersecurity Incident Response Engineer (Mid) to join its government-focused security operations team, focusing on detection, containment, and recovery across enterprise networks and mission-critical systems. The role emphasizes automation, playbooks, and robust incident handling.

Ideal candidates will have 4–7 years of hands-on experience, a related degree or equivalent background, and strong communication skills for cross-functional

Qualifications

• Typically 4–7 years of hands-on cybersecurity operations and incident response.
• Bachelor’s degree in IT, Cybersecurity, Computer Science, or related field, or equivalent work experience.
• Strong incident response, containment, eradication, and data security practices.
• Excellent written and verbal communication skills.

Responsibilities

• Perform technical analysis of security events and incidents using SIEM, IDS/IPS, EDR to identify attack vectors, affected assets, and potential data exposure.
• Develop and refine incident response runbooks and automation workflows that standardize triage, containment, and eradication steps for common attack scenarios.
• Coordinate system and network isolation strategies with infrastructure and application teams to contain threats while preserving evidence and minimizing operational disruption.
• Support proactive defensive engineering initiatives, including tuning detections, building automated countermeasures, and contributing to programs designed to defend against sophisticated adversaries.
• Perform host and network forensics, including log review, basic memory and disk analysis, and artifact collection to support root cause analysis and potential legal or compliance needs.
• Map observed adversary behavior to MITRE ATT&CK to understand attacker tactics, techniques, and procedures and to recommend targeted detection improvements.
• Ensure incident handling practices are aligned with data security best practices and applicable government security policies, supporting auditability and regulatory compliance.
• Produce clear incident documentation, timelines, and lessons learned that feed into security awareness, control hardening, and process improvements.

Skills

Incident response

Communication skills

Analytical thinking

SIEM/EDR experience

ITIL processes

Education

Bachelor’s degree in IT/Cybersecurity/CS or related field

ITIL Foundation certification

Security+ / CySA+ / CEH / GSEC / GCIA / GCIH or equivalent

Job description

ASM Research, An Accenture Federal Services Company, seeks a Cybersecurity Incident Response Engineer (Mid) to join its government-focused security operations team, focusing on detection, containment, and recovery across enterprise networks and mission-critical systems. The role emphasizes automation, playbooks, and robust incident handling.

Ideal candidates will have 4–7 years of hands-on experience, a related degree or equivalent background, and strong communication skills for cross-functional