Incident Response Engineer - Automation & Forensics

ASM Research, An Accenture Federal Services Company; Honolulu (HI); On-site; USD 67,000 - 82,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, seeks a Mid-level Cybersecurity Incident Response Engineer to help detect, contain, and recover from incidents across enterprise networks and mission-critical systems in a regulated government setting.

You will develop runbooks, automate triage, coordinate isolation with infrastructure teams, and contribute to MITRE ATT&CK‑based improvements, while documenting incidents and lessons learned to strengthen SOC capabilities.

Qualifications

• 4–7 years of hands-on cybersecurity operations and incident response experience.
• Bachelor’s degree in IT, Cybersecurity, Computer Science, or equivalent work experience.
• Experience with incident response tools and platforms such as SIEM, IDS/IPS, and EDR.
• Strong understanding of incident response principles, containment and eradication.

Responsibilities

• Analyze security events and incidents with SIEM/IDS-IPS/EDR to identify attack vectors and data exposure.
• Develop incident response runbooks and automation workflows for triage, containment and eradication.
• Coordinate system and network isolation with infrastructure teams to minimize disruption.
• Support proactive defensive engineering, tuning detections and automated countermeasures.
• Perform host and network forensics to support root cause analysis and compliance needs.
• Map adversary behavior to MITRE ATT&CK to improve detections.
• Ensure incident handling aligns with data security policies and regulations.
• Produce incident timelines, documentation, and lessons learned for improvements.

Skills

Incident response

Cybersecurity operations

Analytical skills

Communication

Education

Bachelor's degree

Tools

SIEM

IDS/IPS

EDR

Job description

ASM Research, An Accenture Federal Services Company, seeks a Mid-level Cybersecurity Incident Response Engineer to help detect, contain, and recover from incidents across enterprise networks and mission-critical systems in a regulated government setting.

You will develop runbooks, automate triage, coordinate isolation with infrastructure teams, and contribute to MITRE ATT&CK‑based improvements, while documenting incidents and lessons learned to strengthen SOC capabilities.