Mid Cybersecurity Incident Response Engineer - Automation

ASM Research, An Accenture Federal Services Company; Austin (TX); On-site; USD 67,000 - 82,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, is seeking an experienced Cybersecurity Incident Response Engineer, Mid, to support detection, containment, and recovery across enterprise networks in a government environment.

You will develop response playbooks, automate triage steps, and help strengthen SOC capabilities through advanced defensive initiatives and forensics support. The role emphasizes collaboration with cross‑functional teams and governance alignment.

Qualifications

• 4–7 years of hands‑on cybersecurity operations and incident response experience.
• Bachelor’s degree in IT, Cybersecurity, Computer Science, or related field, or equivalent work experience.
• Demonstrated experience with incident response tools and platforms such as SIEM, IDS/IPS, and EDR in enterprise environments.
• Strong understanding of incident response principles, containment and eradication techniques, and data security best practices.
• Proven analytical and problem‑solving ability with strong written and verbal communication skills.

Responsibilities

• Conduct technical analysis of security events and incidents using SIEM, IDS/IPS, EDR to identify attack vectors and data exposure.
• Develop and refine incident response runbooks and automation workflows for triage, containment, and eradication.
• Coordinate system and network isolation with infrastructure and application teams to contain threats with minimal disruption.
• Support proactive defensive engineering initiatives, including tuning detections and building automated countermeasures.
• Perform host and network forensics to support root cause analysis and regulatory needs.
• Map observed adversary behavior to MITRE ATT&CK to suggest detections improvements.
• Ensure incident handling aligns with data security best practices and regulatory compliance.
• Produce incident timelines and lessons learned for awareness and control hardening.

Skills

Incident response

SIEM

EDR

Forensics

Communication

Education

Bachelor's degree

Tools

IDS/IPS

SIEM platforms

Incident management tools

Service management platforms

Job description

ASM Research, An Accenture Federal Services Company, is seeking an experienced Cybersecurity Incident Response Engineer, Mid, to support detection, containment, and recovery across enterprise networks in a government environment.

You will develop response playbooks, automate triage steps, and help strengthen SOC capabilities through advanced defensive initiatives and forensics support. The role emphasizes collaboration with cross‑functional teams and governance alignment.