Incident Response Engineer — Automation & Containment

ASM Research, An Accenture Federal Services Company; Jefferson City (MO); On-site; USD 67,000 - 82,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, seeks a Cybersecurity Incident Response Engineer, Mid to join a government-regulated environment. You will analyze security events, develop runbooks, and coordinate containment across teams to minimize disruption while strengthening defenses.

Ideal candidates bring 4–7 years in incident response, a related degree, and hands-on experience with SIEM/EDR/IDS platforms. Strong communication and a collaborative mindset are essential for success.

Qualifications

• Typically 4–7 years of hands-on cybersecurity operations and incident response experience.
• Bachelor’s degree in IT, Cybersecurity, Computer Science, or a related field, or equivalent work experience.
• Demonstrated experience with incident response tools and platforms such as SIEM, IDS/IPS, and EDR in enterprise environments.
• Strong understanding of incident response principles, containment and eradication techniques, and data security best practices.
• Proven analytical and problem-solving ability with strong written and verbal communication skills.

Responsibilities

• Conduct technical analysis of security events and incidents using SIEM, IDS/IPS, EDR, and related tools to identify attack vectors, affected assets, and potential data exposure.
• Develop and refine incident response runbooks and automation workflows that standardize triage, containment, and eradication steps for common attack scenarios.
• Coordinate system and network isolation strategies with infrastructure and application teams to contain threats while preserving evidence and minimizing operational disruption.
• Support proactive defensive engineering initiatives, including tuning detections, building automated countermeasures, and contributing to programs designed to defend against sophisticated adversaries.
• Perform host and network forensics, including log review, basic memory and disk analysis, and artifact collection to support root cause analysis and potential legal or compliance needs.
• Map observed adversary behavior to structured frameworks such as MITRE ATT&CK to understand attacker tactics, techniques, and procedures and to recommend targeted detection improvements.
• Ensure incident handling practices are aligned with data security best practices and applicable government security policies, supporting auditability and regulatory compliance.
• Produce clear incident documentation, timelines, and lessons learned that feed into security awareness, control hardening, and process improvements.

Skills

Cybersecurity ops

Incident response

Analytical skills

Communication skills

Education

Bachelor's degree in IT/Cybersecurity/CS

Tools

SIEM

IDS/IPS

EDR

Job description

ASM Research, An Accenture Federal Services Company, seeks a Cybersecurity Incident Response Engineer, Mid to join a government-regulated environment. You will analyze security events, develop runbooks, and coordinate containment across teams to minimize disruption while strengthening defenses.

Ideal candidates bring 4–7 years in incident response, a related degree, and hands-on experience with SIEM/EDR/IDS platforms. Strong communication and a collaborative mindset are essential for success.