Mid-Level Cyber Incident Response Engineer - Automation

ASM Research, An Accenture Federal Services Company; Indianapolis (IN); On-site; USD 67,000 - 82,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, is seeking a Cybersecurity Incident Response Engineer, Mid to support detection, containment, and recovery of incidents across enterprise networks in a government-regulated environment.

The role involves developing response strategies, automation, and playbooks, coordinating with cross-functional teams, and strengthening SOC capabilities to protect critical assets against evolving adversaries.

Qualifications

• 4–7 years of hands-on cybersecurity incident response experience.
• Bachelor’s degree in IT, Cybersecurity, Computer Science, or related field, or equivalent work experience.
• Demonstrated experience with incident response tools and platforms such as SIEM, IDS/IPS, and EDR in enterprise environments.
• Strong understanding of incident response principles, containment and eradication techniques, and data security best practices.
• Proven analytical and problem‑solving ability with strong written and verbal communication skills.

Responsibilities

• Conduct technical analysis of security events and incidents using SIEM, IDS/IPS, EDR, and related tools to identify attack vectors, affected assets, and potential data exposure.
• Develop and refine incident response runbooks and automation workflows that standardize triage, containment, and eradication steps for common attack scenarios.
• Coordinate system and network isolation strategies with infrastructure and application teams to contain threats while preserving evidence and minimizing operational disruption.
• Support proactive defensive engineering initiatives, including tuning detections, building automated countermeasures, and contributing to programs designed to defend against sophisticated adversaries.
• Perform host and network forensics, including log review, basic memory and disk analysis, and artifact collection to support root cause analysis and potential legal or compliance needs.
• Map observed adversary behavior to structured frameworks such as MITRE ATT&CK to understand attacker tactics, techniques, and procedures and to recommend targeted detection improvements.
• Ensure incident handling practices are aligned with data security best practices and applicable government security policies, supporting auditability and regulatory compliance.
• Produce clear incident documentation, timelines, and lessons learned that feed into security awareness, control hardening, and process improvements.

Skills

Incident response

Analytical thinking

Written & verbal communication

Cross-functional collaboration

Education

Bachelor's degree

Tools

SIEM

EDR

IDS/IPS

Job description

ASM Research, An Accenture Federal Services Company, is seeking a Cybersecurity Incident Response Engineer, Mid to support detection, containment, and recovery of incidents across enterprise networks in a government-regulated environment.

The role involves developing response strategies, automation, and playbooks, coordinating with cross-functional teams, and strengthening SOC capabilities to protect critical assets against evolving adversaries.