Entry-Level Cyber Incident Responder — SOC & Triage

ASM Research, An Accenture Federal Services Company; Phoenix (AZ); On-site; USD 56,000 - 82,000; Full time

Job summary

ASM Research in Phoenix, AZ is seeking a Junior Cybersecurity Incident Response Engineer to monitor enterprise security tools and logs, analyze events, and triage potential threats targeting mission‑critical systems.

You will perform initial investigations, distinguish false positives from real incidents, escalate significant events to senior analysts, and document findings while supporting containment, recovery, and ongoing tuning of detection rules in a regulated federal IT environment.

Qualifications

• Bachelor’s degree in IT, CS, Cybersecurity, or equivalent experience.
• 0–3 years in cybersecurity or related roles with security monitoring exposure.
• Foundational understanding of cybersecurity concepts and SOC role.
• Hands-on familiarity with security tools such as SIEM, firewalls, IDS/IPS, endpoint protection, or vulnerability scanners.
• Active SECRET clearance or ability to obtain and maintain required clearance; U.S. citizenship required.

Responsibilities

• Monitor SIEM and security tooling to review events and identify suspicious patterns.
• Perform Tier 1 alert triage by validating context, determining severity, and creating documented tickets for escalation.
• Assist with incident response activities: gather evidence, capture indicators of compromise, and support containment and recovery.
• Document investigations with timelines, data sources, actions, and handoffs for audits.
• Maintain familiarity with firewalls, IDS/IPS, endpoint protection, and vulnerability scanners and interpret alerts.
• Follow SOC SOPs and playbooks; contribute feedback to improve detection and response.
• Support tuning of rules, use cases, and dashboards to reduce noise and improve detection.
• Collaborate with IT, operations, and risk teams to align monitoring with policies and mission priorities.

Skills

SIEM familiarity

Threat detection

Incident triage

Log analysis

Communication

Teamwork

Regulatory awareness

Education

Bachelor’s degree in IT/CS/Cybersecurity or equivalent experience

Tools

Firewalls

IDS/IPS

Endpoint protection

Vulnerability scanners

Job description

ASM Research in Phoenix, AZ is seeking a Junior Cybersecurity Incident Response Engineer to monitor enterprise security tools and logs, analyze events, and triage potential threats targeting mission‑critical systems.

You will perform initial investigations, distinguish false positives from real incidents, escalate significant events to senior analysts, and document findings while supporting containment, recovery, and ongoing tuning of detection rules in a regulated federal IT environment.