Incident Response Engineer: Automate and Fortify SOC

ASM Research, An Accenture Federal Services Company; Atlanta (GA); On-site; USD 67,000 - 82,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, seeks a Cybersecurity Incident Response Engineer, Mid, to support detection, containment, and recovery of incidents across enterprise networks and mission-critical systems in a regulated government environment.

You will develop runbooks, automate workflows, coordinate with infrastructure and application teams, and help strengthen SOC capabilities, while ensuring auditability and regulatory alignment.

Qualifications

• 4–7 years of hands-on cybersecurity operations and incident response.
• Bachelor’s degree in IT, Cybersecurity, Computer Science, or related field, or equivalent work experience.
• Experience with incident response tools such as SIEM, IDS/IPS and EDR.
• Strong incident response principles, containment and eradication techniques, and data security practices.
• Proven analytical and problem‑solving ability with strong written and verbal communication skills.

Responsibilities

• Conduct technical analysis of security events and incidents using SIEM, IDS/IPS, EDR to identify attack vectors and affected assets.
• Develop and refine incident response runbooks and automation workflows for triage, containment and eradication.
• Coordinate system and network isolation with infrastructure and application teams to contain threats while preserving evidence.
• Support proactive defensive engineering initiatives, tuning detections and building automated countermeasures.
• Perform host and network forensics to support root cause analysis and potential legal or compliance needs.
• Map attacker behavior to MITRE ATT&CK to improve detection and response.
• Ensure incident handling aligns with data security policies, supporting auditability and compliance.
• Produce incident timelines and lessons learned to feed security awareness and process improvements.

Skills

Incident response

Cybersecurity operations

Communication skills

Education

Bachelor’s degree or equivalent experience

Tools

SIEM

IDS/IPS

EDR

Job description

ASM Research, An Accenture Federal Services Company, seeks a Cybersecurity Incident Response Engineer, Mid, to support detection, containment, and recovery of incidents across enterprise networks and mission-critical systems in a regulated government environment.

You will develop runbooks, automate workflows, coordinate with infrastructure and application teams, and help strengthen SOC capabilities, while ensuring auditability and regulatory alignment.