Junior Cybersecurity Incident Responder

asmexternalcareersite; United States; Remote; USD 65,000 - 90,000; Full time

Job summary

ASM Research is seeking a Cybersecurity Incident Response Engineer, Jr. to monitor enterprise security tools and logs, detect threats, and triage incidents targeting mission-critical systems.

You will perform initial investigations, distinguish true incidents from false positives, and escalate significant events to senior analysts as needed. In a highly regulated federal IT environment, you will document investigations, support containment and recovery actions, tune detection rules and

Qualifications

• Bachelor’s degree or equivalent experience in IT, CS or cybersecurity.
• 0–3 years in cybersecurity/IT with security monitoring exposure.
• Foundational cybersecurity concepts and SOC roles.
• Ability to interpret alerts and logs.
• Active SECRET clearance or ability to obtain clearance.
• U.S. citizenship required.
• Strong analytical and teamwork skills.

Responsibilities

• Monitor SIEM and other security tools to review events and correlate logs.
• Perform Tier 1 alert triage and generate documented tickets for escalation.
• Assist with incident response, gathering evidence and containment.
• Document investigations with timelines and data sources.
• Collaborate with IT, operations and risk teams to align monitoring with policies.
• Follow SOC procedures and contribute to playbooks.
• Support tuning of rules and dashboards to reduce noise and improve detection.

Skills

SIEM

Firewalls

IDS/IPS

Endpoint protection

Vulnerability scanners

Analytical skills

Communication skills

Teamwork

Education

Bachelor’s degree in IT, Computer Science, Cybersecurity, or related field

Job description

ASM Research is seeking a Cybersecurity Incident Response Engineer, Jr. to monitor enterprise security tools and logs, detect threats, and triage incidents targeting mission-critical systems.

You will perform initial investigations, distinguish true incidents from false positives, and escalate significant events to senior analysts as needed. In a highly regulated federal IT environment, you will document investigations, support containment and recovery actions, tune detection rules and