Incident Response Engineer: Cyber Defense & Automation

ASM Research, An Accenture Federal Services Company; Hartford (CT); On-site; USD 67,000 - 82,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, seeks a Cybersecurity Incident Response Engineer, Mid to join a government-focused security operations program. You will drive detection, containment, and recovery across enterprise networks and mission-critical systems.

You will develop runbooks, automate response, and coordinate with cross-functional teams to minimize impact while preserving evidence. A strong background in SIEM/EDR/IDS, incident response principles, and regulatory awareness

Qualifications

• Bachelor's degree in IT, Cybersecurity, Computer Science, or related field.
• Hands-on cybersecurity operations and incident response experience.
• Experience with incident response tools such as SIEM, IDS/IPS, and EDR.
• Strong incident response principles and communication skills.
• Preferred ITIL-based major incident leadership and related certifications.

Responsibilities

• Analyze security events and incidents across networks to identify attack vectors.
• Develop runbooks and automation for triage, containment, and eradication.
• Coordinate system and network isolation with infra teams while preserving evidence.
• Advance proactive defense through tuning detections and automated countermeasures.
• Perform host/network forensics to support root cause analysis.
• Map adversary behavior to MITRE ATT&CK and suggest detections.
• Ensure incident handling aligns with gov data security policies and audits.
• Document incidents with timelines and lessons learned.

Education

Bachelor's degree or equivalent in IT / Cybersecurity / Computer Science

Tools

SIEM

IDS/IPS

EDR

Job description

ASM Research, An Accenture Federal Services Company, seeks a Cybersecurity Incident Response Engineer, Mid to join a government-focused security operations program. You will drive detection, containment, and recovery across enterprise networks and mission-critical systems.

You will develop runbooks, automate response, and coordinate with cross-functional teams to minimize impact while preserving evidence. A strong background in SIEM/EDR/IDS, incident response principles, and regulatory awareness