Junior Cyber Incident Responder — SOC Triage & Response

ASM Research, An Accenture Federal Services Company; Annapolis (MD); On-site; USD 56,000 - 82,000; Full time

Job summary

ASM Research is seeking a Junior Cybersecurity Incident Response Engineer to monitor enterprise security tooling and logs, detect threats, and triage incidents targeting mission‑critical systems. You will collaborate with senior analysts to escalate significant events and support basic containment actions in a highly regulated federal IT environment.

The role involves documenting findings, tuning detections to reduce noise, and maintaining familiarity with firewalls, IDS/IPS, and endpoint

Qualifications

• Bachelor’s degree or equivalent experience in IT, CS, or Cybersecurity.
• 0–3 years of cybersecurity/IT operations experience with monitoring and triage.
• Foundational cybersecurity concepts and SOC role understanding.
• Exposure to security tools and basic alerts/logs.
• Active SECRET clearance or ability to obtain and maintain required clearance.
• U.S. citizenship required to support federal information security requirements.
• Strong analytical, problem‑solving, communication, and teamwork skills.

Responsibilities

• Monitor SIEM and security tooling to review events and identify threats.
• Perform Tier 1 alert triage by validating context and generating tickets for escalation.
• Assist with incident response: evidence gathering, IOCs, containment and recovery under guidance.
• Document investigations with timelines, sources, actions, and handoffs.

Skills

Analytical thinking

Communication

Teamwork

Education

Bachelor’s degree in IT/Computer Science/Cybersecurity

Tools

SIEM

Firewalls

IDS/IPS

Endpoint protection

Vulnerability scanners

Job description

ASM Research is seeking a Junior Cybersecurity Incident Response Engineer to monitor enterprise security tooling and logs, detect threats, and triage incidents targeting mission‑critical systems. You will collaborate with senior analysts to escalate significant events and support basic containment actions in a highly regulated federal IT environment.

The role involves documenting findings, tuning detections to reduce noise, and maintaining familiarity with firewalls, IDS/IPS, and endpoint