Cybersecurity Incident Response Engineer: SOC Innovator

ASM Research, An Accenture Federal Services Company; City of Albany (NY); On-site; USD 67,000 - 82,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company in the United States seeks a Cybersecurity Incident Response Engineer, Mid to support detection, containment, and recovery of incidents across enterprise networks and mission-critical systems in a highly regulated government environment.

Responsibilities include developing response playbooks, automation, forensics, MITRE ATT&CK mapping, and coordinating with cross-functional teams to preserve evidence and minimize disruption.

Qualifications

• 4–7 years of hands-on cybersecurity operations and incident response experience.
• Bachelor’s degree in IT, Cybersecurity, Computer Science, or equivalent work experience.
• Experience with incident response tools such as SIEM, IDS/IPS, and EDR in enterprise environments.
• Strong incident response principles, containment and eradication techniques, and data security best practices.
• Excellent written and verbal communication skills.

Responsibilities

• Analyze security events and incidents using SIEM, IDS/IPS, EDR to identify attack vectors and affected assets.
• Develop runbooks and automation workflows for triage, containment, and eradication.
• Coordinate system and network isolation with infrastructure and application teams.
• Support proactive defensive engineering, tuning detections and building countermeasures.
• Perform host and network forensics to support root cause analysis.
• Map attacker behavior to MITRE ATT&CK to improve detection.
• Ensure incident handling aligns with data security policies and regulatory compliance.
• Produce incident timelines and lessons learned for security awareness and improvements.

Skills

Incident response

Cybersecurity operations

Analytical skills

Communication skills

Education

Bachelor's degree or equivalent

Tools

SIEM

IDS/IPS

EDR

Job description

ASM Research, An Accenture Federal Services Company in the United States seeks a Cybersecurity Incident Response Engineer, Mid to support detection, containment, and recovery of incidents across enterprise networks and mission-critical systems in a highly regulated government environment.

Responsibilities include developing response playbooks, automation, forensics, MITRE ATT&CK mapping, and coordinating with cross-functional teams to preserve evidence and minimize disruption.