Incident Response Analyst - MDR

Trend Micro•Irving, TX

3d•Hybrid

About The Position

The Incident Response Analyst will investigate sophisticated security breaches, lead containment and threat eradication, and serve as a trusted point of contact for enterprise customers during critical security incidents. Working with TrendAI Vision One™ and AI-supported systems, the analyst will conduct forensic investigations, communicate threat intelligence and recommendations, and help customers recover while strengthening their security posture. The role operates within TrendAI’s Global Managed Detection & Response team and contributes to automation initiatives and AI-driven incident response workflows. This is a hybrid role requiring at least three days per week in the office in Las Colinas, Texas. The position requires availability for rotating 24/7 shifts, including nights, weekends, and holidays, and travel when required.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field.
At least 3 years of security operations experience, with demonstrated expertise in incident response and forensics, malware analysis and threat investigation, and SOC operations or security monitoring.
Familiarity with AI and automation in incident response workflows, including alert triage and forensic analysis.
Advanced Windows and Linux forensics knowledge, including registry, event logs, artifacts, and filesystem analysis.
Experience with forensic tools such as SIFT Workstation, WinPMEM, dd/dcfldd, Autopsy, Volatility Framework, and FTK Imager, or similar tools.
Knowledge of OS and network tools such as Wireshark, Bro/SiLK, NetFlow, and tcpdump, or similar tools.
Experience with SIEM platforms, syslog analysis, and event correlation procedures.
Knowledge of static and dynamic malware analysis techniques.
Understanding of threat actor TTPs and MITRE ATT&CK framework alignment; ability to contribute to organizational threat intelligence and leverage threat intelligence platforms.
Working knowledge of TrendAI Vision One or equivalent threat intelligence/XDR platforms.
Strong written and verbal communication skills, including the ability to translate forensic findings for technical and executive audiences.
Self-directed learning ability and aptitude for rapidly mastering new tools and threat landscapes.
Comfort working under pressure in fast-paced, high-stakes environments.
Ability to work 24/7 rotating shifts, including nights, weekends, and holidays.
Willingness to travel when required.
Strong analytical and problem-solving skills and ability to work effectively in a global team.
Comfort communicating with customers by email, chat, and phone.
Must be authorized to work in the United States without employment-based visa sponsorship, now or in the future.

Nice To Haves

GCIH (GIAC Certified Incident Handler) certification.
GCFA (GIAC Certified Forensic Analyst) or GCFE (GIAC Certified Forensic Examiner) certification.
CISSP or OSCP certification.

Responsibilities

Conduct root cause analysis of security breaches and determine attack vectors, scope, and business impact.
Lead incident containment and threat eradication using TrendAI Vision One™, coordinating with internal teams and customer stakeholders through resolution.
Analyze malware and other threat components; develop and refine detection rules; and generate threat intelligence and indicators of compromise (IoCs).
Create executive-ready incident reports, brief stakeholders, and recommend security improvements.
Hunt for advanced threat indicators across customer networks and improve detection logic and fidelity.
Contribute to automation and AI initiatives to reduce response times and analyst burden and improve MDR delivery.
Build trusted customer relationships and explain complex forensic findings to technical and executive audiences.