Incident Response Engineer — Automation & Forensics

ASM Research, An Accenture Federal Services Company; Sacramento (CA); On-site; USD 67,000 - 82,000; Full time

Job summary

ASM Research invites a skilled Cybersecurity Incident Response Engineer, Mid to join our team in a government‑regulated environment. You will analyze security events, orchestrate triage and containment, and drive automation to speed response across enterprise networks and mission‑critical systems.

You will map attacker behavior to MITRE ATT&CK, contribute to proactive defenses, and document findings to support audits and continuous improvement.

Qualifications

• 4–7 years hands‑on cybersecurity operations experience.
• Bachelor’s degree or equivalent work experience.
• Experience with incident response tools (SIEM, IDS/IPS, EDR) in enterprise environments.
• Strong incident response principles and data security best practices.
• Proven analytical and problem‑solving ability with strong written and verbal communication skills.

Responsibilities

• Conduct technical analysis of security events using SIEM, IDS/IPS, EDR to identify attack vectors and affected assets.
• Develop and refine incident response runbooks and automation workflows for triage, containment, and eradication.
• Coordinate system and network isolation strategies with infrastructure and application teams.
• Support proactive defensive engineering initiatives, including tuning detections and automated countermeasures.
• Perform host and network forensics to support root cause analysis and compliance needs.
• Map observed adversary behavior to MITRE ATT&CK to guide detection improvements.
• Ensure incident handling aligns with data security policies, auditability, and regulatory requirements.
• Produce incident documentation, timelines, and lessons learned for security awareness.

Skills

Incident response

Analytical thinking

Written communication

Verbal communication

ITIL major incidents

Education

Bachelor’s degree in IT, Cybersecurity, CS or related field

Tools

SIEM

IDS/IPS

EDR

Job description

ASM Research invites a skilled Cybersecurity Incident Response Engineer, Mid to join our team in a government‑regulated environment. You will analyze security events, orchestrate triage and containment, and drive automation to speed response across enterprise networks and mission‑critical systems.

You will map attacker behavior to MITRE ATT&CK, contribute to proactive defenses, and document findings to support audits and continuous improvement.