Incident Response Engineer — Cyber Defense & Automation

ASM Research, An Accenture Federal Services Company; Helena (MT); On-site; USD 67,000 - 82,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company in Helena, MT, is seeking a Mid-level Cybersecurity Incident Response Engineer to detect, contain, and recover from incidents across enterprise networks and mission-critical systems in a regulated government environment.

You will develop runbooks and automation, coordinate isolation with infrastructure teams, and contribute to MITRE ATT&CK-aligned detection improvements while documenting incidents and lessons learned for security awareness and

Qualifications

• Bachelor's degree or equivalent work experience in IT, cybersecurity, CS or related field.
• 4–7 years of hands-on cybersecurity operations and incident response experience.
• Demonstrated experience with incident response tools such as SIEM, IDS/IPS and EDR.
• Strong understanding of incident response principles and data security best practices.

Responsibilities

• Analyze security events and incidents using SIEM, IDS/IPS, and EDR to identify attack vectors.
• Develop and refine incident response runbooks and automation workflows.
• Coordinate system and network isolation with infrastructure teams to contain threats.
• Support proactive defensive engineering, tuning detections and building countermeasures.
• Perform host and network forensics to support root cause analysis and compliance needs.
• Map adversary behavior to MITRE ATT&CK to improve detections.
• Ensure incident handling aligns with security policies and regulatory requirements.
• Document incidents, timelines, and lessons learned for awareness and hardening.

Skills

Analytical thinking

Problem solving

Communication skills

Incident response principles

Education

Bachelor's degree in IT, Cybersecurity, Computer Science, or related field

Tools

SIEM

IDS/IPS

EDR

Job description

ASM Research, An Accenture Federal Services Company in Helena, MT, is seeking a Mid-level Cybersecurity Incident Response Engineer to detect, contain, and recover from incidents across enterprise networks and mission-critical systems in a regulated government environment.

You will develop runbooks and automation, coordinate isolation with infrastructure teams, and contribute to MITRE ATT&CK-aligned detection improvements while documenting incidents and lessons learned for security awareness and