Cybersecurity Incident Response Engineer, Sr

Position Overview The Cybersecurity Incident Response Engineer, Senior leads complex incident response efforts for enterprise networks and missionu2011critical systems, owning the technical direction and coordination of highu2011impact events in a highly regulated environment. This role applies ITILu2011aligned incident management principles to structure major incident handling while maintaining deep technical focus on threat containment and eradication. It also drives proactive cybersecurity initiatives, including automation, custom scripting, and advanced defensive engineering, to strengthen the organizationu2019s ability to prevent, detect, and rapidly respond to sophisticated adversarial tactics. The Senior Engineer develops and deploys scalable countermeasures, enhances SOC tooling and integrations, and implements advanced detection and response programs to defend against complex attacks. This role also mentors junior responders, shapes incident response governance, and influences broader security architecture and operations based on emerging threats and incident trends. Key Responsibilities + Lead major incident bridges and war rooms, orchestrating technical teams, tracking actions, and making timeu2011critical decisions to restore service and mitigate business risk. + Integrate ITIL incident and major incident management practices with technical response workflows, ensuring disciplined prioritization, communication, and closure. + Design and optimize incident detection and response processes, including playbooks, escalation paths, and automation, to improve consistency, speed, and quality of response. + Build automation, orchestration, and custom scripting solutions to reduce manual workload, enhance triage and response, and streamline containment and eradication actions. + Perform advanced threat and forensic analysis of endpoint, network, identity, and cloud data to understand attacker objectives, lateral movement, and persistence mechanisms. + Partner with problem management and change management functions to translate incident findings into longu2011term corrective actions, configuration changes, and risku2011reducing initiatives. + Define and track incident metrics such as MTTR, MTTD, incident volume, and recurrence, using data to identify systemic weaknesses and to brief leadership on operational risk. + Provide technical and procedural coaching to incident handlers and SOC analysts, elevating investigative techniques, documentation quality, and stakeholder communication. Required Qualifications + 8+ years of progressive IT and cybersecurity experience with significant responsibility for incident response and major incident leadership. + Bacheloru2019s degree in IT, Cybersecurity , Computer Science, Business Administration, or a related field, or equivalent work experience. + Strong understanding of ITIL principles and incident management best practices, including experience with major incident processes. + Proficiency with incident management and service management tools integrated with security operations. + Excellent problemu2011solving, analytical, communication, and interpersonal skills with demonstrated ability to manage multiple simultaneous incidents. Preferred Qualifications + Demonstrated leadership of ITILu2011based major incident processes in large enterprises, including executive and customeru2011facing communications. + Strong experience with enterprise incident management tools and service management platforms integrated with SOC and cyber defense functions. + Certifications such as ITIL Foundation plus advanced cybersecurity or incident response credentials evidencing both service management and deep technical capability. + At least one cybersecurityu2011related professional certification u2014 or the ability to obtain one within one year of hire u2014 such as Security+, CySA+, GSEC, CEH, GCIA, GCIH, CISM or another industryu2011recognized equivalent. Compensation Ranges Compensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees. EEO Requirements It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies. All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment. Physical Requirements The physical requirements described in

Created: 2026-04-30