Incident Response Analyst - Threat Hunter & Forensics

TrendMicro; Ciudad de México; Hybrid; MXN 400,000 - 650,000; Full time

Job summary

TrendAITM is seeking an Incident Response Analyst to support incident response for TrendAI and its customers across endpoints, networks, and cloud environments. This role blends technical response with malware analysis and threat intelligence.

You will investigate incidents, perform root-cause analysis, and communicate findings to technical teams and customers. Some travel and after-hours support may be required.

Qualifications

• 1–2+ years of experience in incident response, forensic analysis, and security operations.
• Strong English and Spanish communication skills, both written and verbal.
• Strong understanding of Windows, Linux, macOS and enterprise environments.
• Familiarity with MITRE ATT&CK framework.
• Availability for occasional on-call support and after-hours incident response.
• Willingness to travel to support engagements or customers.

Responsibilities

• Investigate, triage, and respond to security incidents for TrendAI customers across endpoints, networks, and cloud environments, including leading efforts related to containment, eradication, and forensic analysis.
• Conduct thorough root cause analysis and document findings in clear, actionable reports that support both technical teams and stakeholders.
• Perform proactive threat hunting activities to identify adversary behavior that may have evaded existing detection mechanisms.
• Communicate timely and effectively with internal teams and customers.
• Provide timely, actionable updates to customers or internal stakeholders.
• Partner with detection engineering and security operations teams to improve visibility.

Skills

Incident response

Forensic analysis

Security operations

English

Spanish

MITRE ATT&CK

On-call

Travel

Job description

TrendAITM is seeking an Incident Response Analyst to support incident response for TrendAI and its customers across endpoints, networks, and cloud environments. This role blends technical response with malware analysis and threat intelligence.

You will investigate incidents, perform root-cause analysis, and communicate findings to technical teams and customers. Some travel and after-hours support may be required.