Incident Response Analyst - MDR

About the Role

TrendAI™ is a global AI security leader and enterprise business unit of Trend Micro. In this hybrid role in Las Colinas, Texas (225 E John W Carpenter Fwy #1500, Irving, TX75062), you will help protect customers by leveraging AI‑driven alert triage and anomaly detection to reduce false positives and accelerate incident response.

• Forensic Investigation:
  Conduct root‑cause analysis of security breaches; determine attack vectors, scope and business impact.
• Incident Response:
  Lead containment and threat eradication using TrendAI Vision One™, coordinating across internal teams and customer stakeholders from first alert to resolution.
• Threat Analysis & Detection:
  Analyze malware and threat components; develop and refine detection rules; generate threat intelligence and IoCs.
• Customer Reporting:
  Create executive‑ready incident reports, deliver briefings to stakeholders, and recommend security improvements.
• Proactive Threat Operations:
  Hunt for advanced threat indicators across customer networks; improve detection logic and fidelity.
• AI Orchestration:
  Contribute to automation and AI initiatives that compress response times, reduce analyst burden, and sharpen the overall quality of MDR delivery.

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or related field.
• 3+ years in security operations with demonstrated expertise in incident response and forensics, malware analysis, SOC operations or security monitoring.
• Advanced Windows and Linux forensics (registry, event logs, artifacts, file system analysis). Proficient with tools such as SIFT Workstation, WinPMEM, dd/dclfdd, Autopsy, Volatility Framework, FTK Imager, Wireshark, Bro/SiLK, Netflow, tcpdump or similar.
• Experience with SIEM platforms, syslog analysis, event correlation procedures.
• Static and dynamic malware analysis techniques.
• Knowledge of threat actor TTPs and MITRE ATT&CK framework; ability to leverage threat‑intelligence platforms.
• Working knowledge of the Vision One platform or equivalent XDR/threat‑intelligence platforms.
• Strong written and verbal communication skills; ability to translate complex forensic findings for technical and executive audiences.
• Self‑directed learner with aptitude for rapidly mastering new tools and threat landscapes.
• Comfortable working under pressure; thrives in fast‑paced, high‑stakes environments.
• Ability to work 24/7 rotating shifts, including nights, weekends, and holidays; willing to travel when required.

• GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst/Examiner (GCFA/GCFE), CISSP, OSCP, or other relevant certifications.

Strong analytical and problem‑solving skills; ability to work effectively in a global team environment; comfortable communicating with customers via email, chat, and phone.

• Comprehensive health benefits and paid time off package.
• Pre‑partum, maternity, parental, medical leave and adoption assistance.
• Mental Health Wellness Program & Annual Wellness Incentive.
• 401(k) with company match.
• Pet Insurance.
• Collaborative and innovative culture.

This position does not offer sponsorship for work‑permit applications or renewals. Candidates must be authorized to work in the U.S. without the need for employment‑based visa sponsorship, both currently and moving forward.

Trend Micro provides equal employment opportunity for all applicants and employees. Trend Micro does not unlawfully discriminate on the basis of race, color, religion, sex, pregnancy and childbirth or related medical conditions, national origin, ancestry, age, physical or mental disability, medical condition, family care leave status, veteran status, marital status, sexual orientation or gender identity.