Incident Response Analyst - MDR

Trend Micro; Irving (TX); Hybrid; USD 90,000 - 130,000; Full time

Job summary

TrendAI, the AI security arm of Trend Micro, seeks an Incident Response Analyst to investigate breaches, lead containment, and deliver insights that strengthen customers’ security posture. You will work with AI-enabled workflows, refining detections and providing clear guidance to executives.

You will collaborate across global threat operations, translating complex data into actionable decisions while advancing automation to shorten response times and improve overall MDR delivery.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related field.
• 3+ years in security operations with demonstrated expertise in incident response and forensics.
• Experience in malware analysis, threat investigation, and SOC operations.

Responsibilities

• Conduct root cause analysis of security breaches and determine attack vectors, scope and business impact.
• Lead containment and threat eradication across internal teams and customer stakeholders.
• Analyze malware and threat components; develop and refine detection rules and IoCs.
• Create executive-ready incident reports and briefings for stakeholders.
• Hunt for advanced threat indicators across customer networks and improve detection logic.
• Contribute to automation and AI initiatives to reduce analyst workload and speed responses.

Skills

Incident response

Forensics

Malware analysis

Threat detection

SOC operations

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

SIFT Workstation

WinPMEM

Autopsy

Volatility Framework

Wireshark

tcpdump

Job description

Job Description

TrendAI™, the global AI security leader and enterprise business unit of Trend Micro, empowers organizations with full AI visibility and consolidated security that inspires confidence, drives innovation, and eliminates risk.

At TrendAI™, we’re always seeking exceptional talent; people who want to collaborate with the best and push boundaries together. Here, your work goes beyond building a career. You will help protect what matters and play a vital role in shaping a safer, more trustworthy AI-powered future.

AI Fearlessly.

Location: This is a hybrid role with a minimum in-office requirement of 3 days per week in the Las Colinas, Texas office located at 225 E John W Carpenter Fwy #1500, Irving, TX 75062.

The cybersecurity industry is at an inflection point. As adversaries evolve and detection demands accelerate, 24/7 security monitoring is transforming from reactive alert processing into intelligent, customer-centric threat defense. You’ll join our Global Managed Detection & Response (MDR) team at exactly the right moment: when AI-driven alert triage and anomaly detection are enabling analysts to identify genuine threats faster, reduce false positives and focus on what matters most: knowing our customers deeply, protecting them completely and being the team they trust without question.

About the Role

In this role, you’re not just responding to breaches. You’re the person customers rely on when it matters most. You’ll build trusted relationships with enterprise customers, translate complex threat data into intelligence that drives decisions, and lead organisations through their most critical security moments with clarity and control. Working alongside AI systems that accelerate your investigative capabilities, you’ll compress detection times from hours to minutes and deliver insights that turn incidents into lasting security improvements. Every forensic analysis you conduct, every malware sample you dissect, and every recommendation you make leaves customers measurably harder to compromise than before you arrived.

As an Incident Response Analyst, you’ll investigate sophisticated security breaches, lead containment under pressure and become the person enterprise customers trust when everything is on the line. You’ll be the critical link between TrendAI Vision One™ and customer recovery, operating across global threat operations where seconds matter, relationships are everything and AI amplifies what you’re already capable of.

You will also play an active role in shaping how AI transforms incident response. That means contributing to automation initiatives, stress-testing AI-driven workflows and helping define how our analysts and AI systems work together to respond faster, investigate deeper and protect more effectively at scale. The analysts who join us now are not just using the tools. They are helping build them.

Core Responsibilities

• Forensic Investigation : Conduct root cause analysis of security breaches; determine attack vectors, scope and business impact with precision and accountability.
• Incident Response: Lead containment and threat eradication using TrendAI Vision One™, coordinating across internal teams and customer stakeholders from first alert to resolution.
• Threat Analysis & Detection: Analyze malware and threat components; develop and refine detection rules; generate threat intelligence and IoCs.
• Customer Reporting: Create executive-ready incident reports; deliver briefings to stakeholders; recommend security improvements.
• Proactive Threat Operations: Hunt for advanced threat indicators across customer networks; improve detection logic and fidelity.
• AI Orchestration: Contribute to automation and AI initiatives that compress response times, reduce analyst burden, and sharpen the overall quality of MDR delivery.

Required Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related field
• 3+ years in security operations with demonstrated expertise in:
• Incident response and forensics;
• Malware analysis and threat investigation;
• SOC operations or security monitoring.

Technical Competencies

• AI in Practice: Familiarity with how AI and automation are reshaping incident response workflows, from alert triage to forensic analysis. Curiosity about where it’s going matters as much as where you are today.
• OS & Network Forensics : Advanced Windows and Linux forensics (registry, event logs, artifacts, filesystem analysis).
• Forensics Tools : SIFT Workstation, WinPMEM, dd/dclfdd, Autopsy, Volatility Framework, FTK Imagerm Wireshark, Bro/SiLK, Netflow, tcpdump - or similar OS/Network Tools.
• Log Analysis & Correlation : SIEM platforms, syslog analysis, event correlation procedures
• Malware analysis : Static and dynamic analysis techniques.
• Threat Intelligence: Understand threat actor TTPs and MITRE ATT&CK framework alignment; contribute to organizational threat intelligence. Leverage threat intelligence platforms.
• TrendAI familiarity : Working knowle