Cybersecurity IR Engineer: Automation & Playbooks

ASM Research, An Accenture Federal Services Company; Saint Paul (MN); On-site; USD 67,000 - 82,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company is seeking a Cybersecurity Incident Response Engineer, Mid to support detection, containment, and recovery of incidents across enterprise networks in a regulated government environment. You will develop response playbooks, automate workflows, and coordinate isolation with cross‑functional teams to minimize disruption while preserving evidence.

The role emphasizes advanced defensive engineering, improved detection logic, and SOC capability

Qualifications

• Typically 4–7 years of hands-on cybersecurity operations experience.
• Bachelor’s degree in IT, Cybersecurity, Computer Science, or related field, or equivalent work experience.
• Demonstrated experience with incident response tools such as SIEM, IDS/IPS, and EDR in enterprise environments.
• Strong understanding of incident response principles, containment and eradication techniques, and data security best practices.
• Proven analytical and problem‑solving ability with strong written and verbal communication skills.

Responsibilities

• Analyze security events and incidents using SIEM, IDS/IPS, EDR to identify attack vectors.
• Develop runbooks and automation workflows for triage, containment, and eradication.
• Coordinate system and network isolation with infrastructure and apps teams to contain threats.
• Support proactive defensive engineering, including tuning detections and automated countermeasures.
• Perform host and network forensics for root cause analysis and compliance needs.
• Map observed adversary behavior to MITRE ATT&CK to improve detections.
• Ensure incident handling aligns with data security policies and auditability.
• Produce incident timelines and lessons learned for awareness and improvements.

Skills

Incident response

Analytical thinking

Communication skills

Education

Bachelor's degree or equivalent

Tools

SIEM

EDR

IDS/IPS

Job description

ASM Research, An Accenture Federal Services Company is seeking a Cybersecurity Incident Response Engineer, Mid to support detection, containment, and recovery of incidents across enterprise networks in a regulated government environment. You will develop response playbooks, automate workflows, and coordinate isolation with cross‑functional teams to minimize disruption while preserving evidence.

The role emphasizes advanced defensive engineering, improved detection logic, and SOC capability