Rapid-Cycle Cyber Incident Response Engineer

ASM Research, An Accenture Federal Services Company; Bismarck (ND); On-site; USD 67,000 - 82,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, is seeking a Cybersecurity Incident Response Engineer, Mid, to help detect, contain, and recover from incidents across enterprise networks in a highly regulated government environment. The role emphasizes automation, playbooks, and coordination with cross-functional teams.

You will perform forensic analysis, map activities to MITRE ATT&CK, and contribute to improving SOC capabilities and data security policies.

Qualifications

• 4–7 years of hands-on cybersecurity operations and IR experience.
• Bachelor’s degree or equivalent work experience in IT/cybersecurity.
• Experience with incident response tools such as SIEM, IDS/IPS, and EDR.
• Strong understanding of IR principles and data security best practices.
• Proven analytical and communication skills.

Responsibilities

• Perform technical analysis of security events using SIEM, IDS/IPS, and EDR to identify attack vectors.
• Develop runbooks and automation for triage, containment, and eradication.
• Coordinate system and network isolation with infrastructure teams.
• Support proactive defensive engineering and improved detections.
• Conduct host and network forensics to support root cause analysis.
• Map attacker behavior to MITRE ATT&CK and recommend detections.
• Ensure incident handling aligns with data security policies and auditability.
• Produce incident timelines and lessons learned for awareness and improvements.

Skills

Incident response

Cybersecurity operations

Analytical skills

Written/verbal communication

Regulatory awareness

Education

Bachelor’s degree in IT/Cybersecurity/CS

Tools

SIEM

IDS/IPS

EDR

Job description

ASM Research, An Accenture Federal Services Company, is seeking a Cybersecurity Incident Response Engineer, Mid, to help detect, contain, and recover from incidents across enterprise networks in a highly regulated government environment. The role emphasizes automation, playbooks, and coordination with cross-functional teams.

You will perform forensic analysis, map activities to MITRE ATT&CK, and contribute to improving SOC capabilities and data security policies.