Senior Incident Response & Threat Hunter

TrendMicro; Irving (TX); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

Life insurance

401(k) with company match

Paid time off & holidays

Tuition Assistance

Employee Resource Groups

Wellness program

Job summary

Trend Micro is seeking a Sr. Incident Response Analyst to support TrendAI and its customers. You will blend hands-on incident response, malware analysis, and network monitoring across endpoints, networks, and cloud environments.

Responsibilities include leading containment and eradication efforts, performing root-cause analysis, and producing clear reports for technical teams and stakeholders. Occasional on-call and travel may be required.

Qualifications

• 3–5+ years of experience in incident response, forensic analysis, and security operations.
• Strong understanding of operating systems (Windows, Linux, macOS) and enterprise environments.
• Familiarity with MITRE ATT&CK.
• Availability for occasional on-call support and after-hours incident response.
• Willingness to travel as needed to support engagements or customers.

Responsibilities

• Investigate, triage, and respond to security incidents for TrendAI customers across endpoints, networks, and cloud environments.
• Lead containment, eradication, and forensic analysis efforts; document findings in clear, actionable reports.
• Conduct proactive threat hunting to identify adversary behavior that may have evaded detection.
• Communicate timely updates to customers or internal stakeholders and coordinate with teams to improve visibility.
• Partner with detection engineering and security operations to enhance overall security posture.

Skills

Incident response

Forensic analysis

Security operations

Threat hunting

Windows OS

Linux

macOS

MITRE ATT&CK

Tools

MITRE ATT&CK

Job description

Trend Micro is seeking a Sr. Incident Response Analyst to support TrendAI and its customers. You will blend hands-on incident response, malware analysis, and network monitoring across endpoints, networks, and cloud environments.

Responsibilities include leading containment and eradication efforts, performing root-cause analysis, and producing clear reports for technical teams and stakeholders. Occasional on-call and travel may be required.