Incident Response Analyst

TrendMicro; Irving (TX); On-site; USD 70,000 - 110,000; Full time

Job summary

TrendAI, the security arm of Trend Micro, seeks an Incident Response Analyst to join our team. The role blends incident response, network monitoring, and malware analysis to protect our customers and operations.

You will investigate incidents across endpoints, networks, and cloud, perform root cause analysis, and collaborate with detection engineering and security operations to enhance visibility. Occasional on-call support and travel may be required.

Qualifications

• 1–2+ years of incident response, forensic analysis, and security operations.
• Strong understanding of Windows, Linux, and macOS in enterprise environments.
• Familiarity with MITRE ATT&CK framework.

Responsibilities

• Investigate, triage, and respond to security incidents for TrendAI customers across endpoints, networks, and cloud environments.
• Conduct root cause analysis and document clear, actionable reports for technical teams and stakeholders.
• Perform proactive threat hunting to identify adversary behavior that may evade existing detection.
• Communicate timely updates to customers or internal stakeholders.
• Partner with detection engineering and security operations to improve visibility.

Skills

Incident response

Forensic analysis

Security operations

On-call readiness

Threat hunting

Job description

TrendAI™, the global AI security leader and enterprise business unit of Trend Micro, empowers organizations with full AI visibility and consolidated security that inspires confidence, drives innovation, and eliminates risk.

At TrendAI™, we’re always seeking exceptional talent; people who want to collaborate with the best and push boundaries together. Here, your work goes beyond building a career. You will help protect what matters and play a vital role in shaping a safer, more trustworthy AI-powered future. AI Fearlessly.

Job Description Position Summary:

The Incident Response Analyst is an experienced position that supports TrendAI efforts to provide incident response for TrendAI and its customers. This role blends technical knowledge and experience performing incident response, network monitoring, and performs related malware analysis.

Duties & Responsibilities:

• Investigate, triage, and respond to security incidents for TrendAI customers across endpoints, networks, and cloud environments, including leading efforts related to containment, eradication, and forensic analysis.
• Conduct thorough root cause analysis and document findings in clear, actionable reports that support both technical teams and stakeholders.
• Perform proactive threat hunting activities to identify adversary behavior that may have evaded existing detection mechanisms.
• Communicate timely and effectively with internal teams and customers.
• Provide timely, actionable updates to customers or internal stakeholders.
• Partner with detection engineering and security operations teams to improve visibility.

Required Qualifications:

• 1–2+ years of experience in incident response, forensic analysis, and security operations.
• Strong understanding of operating systems (Windows, Linux, macOS) and enterprise environments.
• Familiarity with threat intelligence frameworks such as MITRE ATT&CK.
• Availability for occasional on-call support and after-hours incident response.
• Willingness to travel as needed to support engagements or customers.

Preferred Qualifications:

• Industry certifications such as GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), Certified Information Systems Security Professional (CISSP).

Trend Micro provides equal employment opportunity for all applicants and employees.

Trend Micro does not unlawfully discriminate on the basis of race, color, religion, sex, pregnancy and childbirth or related medical conditions, national origin, ancestry, age, physical or mental disability, medical condition, family care leave status, veteran status, marital status, sexual orientation, or gender identity.