Incident Response Analyst - MDR

Trend Micro•Irving, TX

5d•Hybrid

About The Position

The Incident Response Analyst will investigate sophisticated security breaches, lead containment and threat eradication, and guide enterprise customers through critical security incidents. The role works with TrendAI Vision One™ and AI-enabled systems to investigate threats, reduce response times, and help customers strengthen their security. The analyst builds trusted customer relationships, translates threat data into actionable intelligence, and contributes to the development and improvement of AI-driven response workflows and automation initiatives. This is a hybrid role requiring at least three days per week in the Las Colinas office at 225 E John W Carpenter Fwy #1500, Irving, Texas. The position requires availability for 24/7 rotating shifts, including nights, weekends, and holidays, and travel when required.

Requirements

Bachelor's degree in Computer Science, Cybersecurity, Information Security, or a related field.
At least 3 years of experience in security operations, including incident response and forensics, malware analysis and threat investigation, and SOC operations or security monitoring.
Advanced Windows and Linux forensics knowledge, including registry, event logs, artifacts, and filesystem analysis.
Experience with forensic tools such as SIFT Workstation, WinPMEM, dd/dclfdd, Autopsy, Volatility Framework, FTK Imager, Wireshark, Bro/SiLK, Netflow, tcpdump, or similar OS/network tools.
Knowledge of SIEM platforms, syslog analysis, and event correlation procedures.
Knowledge of static and dynamic malware analysis techniques.
Understanding of threat actor TTPs and MITRE ATT&CK alignment, and ability to contribute to threat intelligence using threat intelligence platforms.
Working knowledge of TrendAI Vision One or equivalent threat intelligence/XDR platforms.
Familiarity with AI and automation in incident response workflows, including alert triage and forensic analysis.
Strong written and verbal communication skills, including the ability to explain complex forensic findings to technical and executive audiences.
Self-directed learning ability and aptitude for quickly mastering new tools and threat landscapes.
Ability to work under pressure in fast-paced, high-stakes environments and effectively in a global team.
Ability to communicate with customers by email, chat, and phone.
Ability to work 24/7 rotating shifts, including nights, weekends, and holidays.
Willingness to travel when required.
Authorized to work in the U.S. without current or future employment-based visa sponsorship.

Nice To Haves

GCIH (GIAC Certified Incident Handler) certification.
GCFA or GCFE (GIAC Certified Forensic Analyst or Examiner) certification.
CISSP or OSCP certification.

Responsibilities

Conduct root cause analysis of security breaches and determine attack vectors, scope, and business impact.
Lead incident containment and threat eradication using TrendAI Vision One™, coordinating with internal teams and customer stakeholders from initial alert through resolution.
Analyze malware and threat components, develop and refine detection rules, and generate threat intelligence and indicators of compromise (IoCs).
Create executive-ready incident reports, brief stakeholders, and recommend security improvements.
Hunt for advanced threat indicators across customer networks and improve detection logic and fidelity.
Contribute to automation and AI initiatives to reduce response times and analyst workload and improve MDR delivery.
Build customer relationships and communicate forensic findings and incident guidance to technical and executive audiences.