Incident Response Analyst — Forensics & Threat Hunting

TrendAI; Ciudad de México; Presencial; MXN 360.000 - 480.000; Jornada completa

Descripción de la vacante

TrendAI, the global AI security leader and enterprise business unit of Trend Micro, is seeking an Incident Response Analyst. You will apply incident response, malware analysis, and threat-hunting skills to support TrendAI and its customers across endpoints, networks, and cloud environments.

You will work with detection engineering and security operations teams, communicate findings to technical and non-technical stakeholders, and may be on-call or travel as needed.

Formación

• 1–2+ years in incident response, forensic analysis, and security operations.
• Strong English and Spanish written and verbal communication.
• Experience with Windows, Linux, and macOS in enterprise environments.
• Familiarity with MITRE ATT&CK or similar threat frameworks.
• Willingness to travel and provide on-call incident response when needed.

Responsabilidades

• Investigate, triage, and respond to security incidents for TrendAI customers across endpoints, networks, and cloud environments, including containment, eradication, and forensic analysis.
• Conduct root cause analysis and document findings in clear, actionable reports for technical teams and stakeholders.
• Perform proactive threat hunting to identify adversary behavior that may have evaded detection.
• Communicate timely and effectively with internal teams and customers.
• Provide timely, actionable updates to customers or internal stakeholders.
• Partner with detection engineering and security operations teams to improve visibility.

Conocimientos

Incident response

Forensic analysis

Security operations

MITRE ATT&CK

Bilingual EN/ES

Descripción del empleo

TrendAI, the global AI security leader and enterprise business unit of Trend Micro, is seeking an Incident Response Analyst. You will apply incident response, malware analysis, and threat-hunting skills to support TrendAI and its customers across endpoints, networks, and cloud environments.

You will work with detection engineering and security operations teams, communicate findings to technical and non-technical stakeholders, and may be on-call or travel as needed.