Incident Response Engineer — Automation & Forensics

ASM Research, An Accenture Federal Services Company; Columbus (OH); On-site; USD 67,000 - 82,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, is seeking a Cybersecurity Incident Response Engineer, Mid to strengthen detection, containment, and recovery of incidents across enterprise networks and mission‑critical systems within a highly regulated government environment.

The role contributes to developing response strategies, including automation, scripting, and playbooks to improve speed and consistency of security operations.

Qualifications

• 4–7 years hands‑on experience in cybersecurity operations and incident response across enterprise environments.
• Bachelor’s degree in IT, Cybersecurity, Computer Science, or related field, or equivalent work experience.
• Demonstrated experience with incident response tools and platforms such as SIEM, IDS/IPS, and EDR in enterprise environments.

Responsibilities

• Conduct technical analysis of security events and incidents using SIEM, IDS/IPS, EDR to identify attack vectors and affected assets.
• Develop and refine incident response runbooks and automation workflows for triage, containment, and eradication of common attack scenarios.
• Coordinate system and network isolation strategies with infrastructure and application teams to contain threats while preserving evidence and minimizing disruption.
• Support proactive defensive engineering initiatives, including tuning detections and building automated countermeasures.
• Perform host and network forensics, including log review and basic memory/disk analysis to support root cause analysis.
• Map observed adversary behavior to MITRE ATT&CK to understand tactics and improve detections.
• Ensure incident handling aligns with data security best practices and government policies for auditability and compliance.
• Produce incident timelines and lessons learned to feed security awareness and process improvements.

Skills

Incident response

Cybersecurity operations

Automation scripting

Communication skills

Education

Bachelor’s degree in IT/Cybersecurity/CS

Tools

SIEM

EDR

IDS/IPS

Job description

ASM Research, An Accenture Federal Services Company, is seeking a Cybersecurity Incident Response Engineer, Mid to strengthen detection, containment, and recovery of incidents across enterprise networks and mission‑critical systems within a highly regulated government environment.

The role contributes to developing response strategies, including automation, scripting, and playbooks to improve speed and consistency of security operations.