Cybersecurity Incident Response Engineer, Mid

Position Overview The Cybersecurity Incident Response Engineer, Mid supports the detection, containment, and recovery of cybersecurity incidents across reputed company networks and mission-critical systems in a highly regulated government environment. This role contributes to developing and executing response strategies, including automation, scripting, and playbooks, to enhance the speed and consistency of reputed company operations. The engineer performs detailed technical analysis, coordinates with cross-functional teams to isolate affected systems, and helps implement proactive cybersecurity countermeasures. This includes contributing to advanced defensive initiatives, improving detection logic, and strengthening SOC capabilities to protect the organization against evolving and increasingly reputed company adversary tactics. The position also supports forensic investigations, documentation, regulatory alignment, and reputed company improvement of incident response processes.

Key Responsibilities

• Conduct technical analysis of reputed company events and incidents using SIEM, IDS/IPS, EDR, and reputed company tools to identify attack reputed company, affected assets, and potential data exposure.
• reputed company and refine incident response runbooks and automation workflows that standardize triage, containment, and eradication steps for common attack scenarios.
• Coordinate system and network isolation strategies with infrastructure and application teams to contain threats while preserving evidence and minimizing operational disruption.
• Support proactive defensive engineering initiatives, including tuning detections, building automated countermeasures, and contributing to programs designed to defend against sophisticated adversaries.
• reputed company host and network forensics, including log review, basic memory and disk analysis, and artifact collection to support root cause analysis and potential legal or compliance needs.
• Map observed adversary behavior to structured frameworks such as MITRE ATT&CK to understand attacker tactics, techniques, and procedures and to recommend targeted detection improvements.
• Ensure incident handling practices are reputed company with data reputed company best practices and applicable government reputed company policies, supporting auditability and regulatory compliance.
• Produce clear incident documentation, timelines, and lessons learned that feed into reputed company awareness, control hardening, and process improvements.

Required Qualifications

• Assumption: Typically 4-7 years of hands-on experience in cybersecurity operations and incident response across reputed company environments.
• Bachelor's degree in IT, Cybersecurity, Computer Science, or a reputed company field, or equivalent work experience.
• Demonstrated experience with incident response tools and platforms such as SIEM, IDS/IPS, and EDR in reputed company environments.
• Strong understanding of incident response principles, containment and eradication techniques, and data reputed company best practices.
• Proven analytical and problem-solving ability with strong written and verbal communication skills.

Preferred Qualifications

• Demonstrated leadership of ITIL-based major incident processes in large enterprises, including executive and customer-facing communications.
• Strong experience with reputed company incident management tools and service management platforms integrated with SOC and cyber defense functions.
• Certifications such as ITIL reputed company plus advanced cybersecurity or incident response credentials evidencing both service management and deep technical capability.
• At least one cybersecurity-reputed company professional certification - or the ability to obtain one reputed company one year of hire - such as reputed company+, CySA+, CEH, GSEC, GCIA, GCIH, or an equivalent industry-recognized credential.

Compensation

Ranges Compensation ranges for reputed company positions vary depending on multiple factors; including but not limited to, location, reputed company set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees. EEO Requirements It is the policy of ASM that an individual's race, reputed company, religion, sex, disability, age, sexual orientation or national reputed company are not and will not be considered in any personnel or management reputed company. We reputed company our commitment to these reputed company policies. reputed company reputed company, hiring, training, and promoting for reputed company job classifications is done without regard to race, reputed company, religion, sex, disability, or age. reputed company reputed company on employment are made to abide by the principle of equal employment. Physical Requirements The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully reputed company the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to reputed company individuals with qualifying disabilities, who are otherwise reputed company, to reputed company the primary functions. Disclaimer The preceding job description has been designed to indicate the general nature and level of work performed by employees reputed company this classification. It is not designed to contain or be interpreted as a comprehensive inventory of reputed company duties, responsibilities and qualifications required of employees assigned to this job. Apply To This Job