Incident Response Engineer: Automation & Defense

ASM Research, An Accenture Federal Services Company; Montgomery (AL); On-site; USD 67,000 - 82,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, is seeking a Mid-level Cybersecurity Incident Response Engineer to enhance detection, containment, and recovery across enterprise networks ensured by a strong, regulated government environment.

You will develop response strategies, automate playbooks, and contribute to advanced defensive initiatives while coordinating with cross-functional teams to minimize disruption and preserve evidence.

Qualifications

• 4–7 years of hands-on cybersecurity operations and incident response.
• Bachelor’s degree in IT, Cybersecurity, Computer Science, or equivalent work experience.
• Experience with incident response tools such as SIEM, IDS/IPS, and EDR.
• Strong understanding of incident response principles, containment, and data security best practices.
• Proven analytical and problem-solving ability with strong written and verbal communication.

Responsibilities

• Conduct technical analysis of security events using SIEM/EDR/IDS to identify attack vectors and data exposure.
• Develop and refine incident response runbooks and automation workflows.
• Coordinate system and network isolation with infrastructure teams to contain threats with minimal disruption.
• Support proactive defensive engineering, tuning detections, and automated countermeasures.
• Perform host and network forensics to support root cause analysis and regulatory needs.
• Map attacker behavior to MITRE ATT&CK and recommend detection improvements.
• Ensure incident handling aligns with security policies and regulatory compliance.
• Produce incident timelines and lessons learned for awareness and process improvements.

Skills

Incident response

SIEM/EDR/IDS

Analytical thinking

Written and verbal communication

Education

Bachelor's degree in IT/Cybersecurity/CS

Tools

SIEM

IDS/IPS

EDR

Job description

ASM Research, An Accenture Federal Services Company, is seeking a Mid-level Cybersecurity Incident Response Engineer to enhance detection, containment, and recovery across enterprise networks ensured by a strong, regulated government environment.

You will develop response strategies, automate playbooks, and contribute to advanced defensive initiatives while coordinating with cross-functional teams to minimize disruption and preserve evidence.