Incident Response Engineer — Cyber Defense & Automation

ASM Research, An Accenture Federal Services Company; Juneau (AK); On-site; USD 67,000 - 82,000; Full time

Job summary

ASM Research, an Accenture Federal Services company, seeks a Cybersecurity Incident Response Engineer, Mid, to support detection, containment, and recovery of security incidents across enterprise networks in a highly regulated government environment. The role emphasizes developing response strategies, automation, and playbooks to speed and standardize security operations.

Responsibilities include detailed technical analysis using SIEM/EDR, coordinating with infrastructure teams to isolate

Qualifications

• 4–7 years of hands-on cybersecurity operations and incident response experience.
• Bachelor’s degree or equivalent work experience in IT, cybersecurity, CS, or related field.
• Experience with incident response tools such as SIEM, IDS/IPS, and EDR in enterprise environments.

Responsibilities

• Analyze security events and incidents using SIEM/EDR to identify attack vectors and affected assets.
• Develop and refine incident response runbooks and automation workflows for standard triage, containment, and eradication.
• Coordinate isolation strategies with infrastructure and application teams to contain threats while preserving evidence.
• Support proactive defensive engineering initiatives, including tuning detections and building automated countermeasures.
• Perform host and network forensics to support root cause analysis and compliance needs.
• Map observed attacker behavior to MITRE ATT&CK to improve detections and response.

Skills

Analytical skills

Communication skills

Incident response experience

Education

Bachelor’s degree in IT/Cybersecurity/CS

Tools

SIEM

IDS/IPS

EDR

Job description

ASM Research, an Accenture Federal Services company, seeks a Cybersecurity Incident Response Engineer, Mid, to support detection, containment, and recovery of security incidents across enterprise networks in a highly regulated government environment. The role emphasizes developing response strategies, automation, and playbooks to speed and standardize security operations.

Responsibilities include detailed technical analysis using SIEM/EDR, coordinating with infrastructure teams to isolate