Incident Response Engineer: Cyber Defense & Playbooks

ASM Research, An Accenture Federal Services Company; Topeka (KS); On-site; USD 67,000 - 82,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, is seeking a Cybersecurity Incident Response Engineer, Mid to help detect, contain, and recover from incidents across enterprise networks in a regulated government environment.

The role involves developing response strategies, automation, playbooks, and runbooks, performing forensics, aligning with MITRE ATT&CK, and contributing to SOC improvements while ensuring regulatory compliance.

Qualifications

• Typically 4–7 years of hands‑on experience in cybersecurity operations and incident response across enterprise environments.
• Bachelor’s degree in IT, Cybersecurity, Computer Science, or related field, or equivalent work experience.
• Demonstrated experience with incident response tools and platforms such as SIEM, IDS/IPS, and EDR in enterprise environments.
• Strong understanding of incident response principles, containment and eradication techniques, and data security best practices.
• Proven analytical and problem‑solving ability with strong written and verbal communication skills.

Responsibilities

• Conduct technical analysis of security events and incidents using SIEM, IDS/IPS, EDR, and related tools to identify attack vectors, affected assets, and potential data exposure.
• Develop and refine incident response runbooks and automation workflows that standardize triage, containment, and eradication steps for common attack scenarios.
• Coordinate system and network isolation strategies with infrastructure and application teams to contain threats while preserving evidence and minimizing operational disruption.
• Support proactive defensive engineering initiatives, including tuning detections, building automated countermeasures, and contributing to programs designed to defend against sophisticated adversaries.
• Perform host and network forensics, including log review, basic memory and disk analysis, and artifact collection to support root cause analysis and potential legal or compliance needs.
• Map observed adversary behavior to structured frameworks such as MITRE ATT&CK to understand attacker tactics, techniques, and procedures and to recommend targeted detection improvements.
• Ensure incident handling practices are aligned with data security best practices and applicable government security policies, supporting auditability and regulatory compliance.
• Produce clear incident documentation, timelines, and lessons learned that feed into security awareness, control hardening, and process improvements.

Job description

ASM Research, An Accenture Federal Services Company, is seeking a Cybersecurity Incident Response Engineer, Mid to help detect, contain, and recover from incidents across enterprise networks in a regulated government environment.

The role involves developing response strategies, automation, playbooks, and runbooks, performing forensics, aligning with MITRE ATT&CK, and contributing to SOC improvements while ensuring regulatory compliance.