Senior Threat Analyst, Rapid Response

Trend Micro

About The Position

The Senior Threat Analyst leads TrendAI’s rapid-response function within TRII, turning threat research into timely published analysis for media, customers, and the field. Rapid response focuses on breaking and time-sensitive analysis, generally published within a one-to-three-day cycle. This is a senior individual-contributor role, not a people-management position. The role owns the function’s work and standards and serves as its escalation point; writers report to the Director. The rapid-response framework is already operating regionally, and the pipeline that supports it is coming online. The successful candidate will complete the framework’s development and run it globally. The role includes setting the activation and editorial processes, coordinating with threat research and market-facing teams, producing and editing tactical output, and improving monitoring and drafting through automation.

Requirements

Substantial experience as a cyber threat intelligence analyst.
A record of publishing analysis under time pressure that remained sound afterward.
Strong technical writing skills, including the ability to communicate technical material to CISOs, practitioners, and journalists without losing its substance or interest.
Broad knowledge of the threat landscape, including nation-state activity, criminal operations, vulnerabilities, and emerging AI threats.
Sound judgment about what merits publication, including when not to respond.
Experience building or materially improving a process.
Ability to work asynchronously across a distributed team and document work clearly for handoffs.

Nice To Haves

Risk modeling or quantitative threat assessment experience.
Experience with incident communications or newsroom-style operations.
Familiarity with Jira-based intake and editorial workflow.
Experience working alongside automated drafting or summarization tools.
Public speaking, briefing, or media experience.

Responsibilities

Own and scale TRII’s rapid-response model globally, and finalize the RACI with Threat Ops, AI Labs, and Threat Hunt.
Manage the activation process from signal identification through scoring, tiering, and activation; determine response priorities and service levels, including a one-to-two-day turnaround for P0 work and a one-to-three-day cycle for tactical publication.
Merge the two existing scoring systems so one story score informs both publication and commercial activation.
Align the threat rapid-response process with the market-signals process run by product marketing, creating one operating process.
Establish and operate listening for threat, incident, breach, and relevant market-news signals in coordination with Threat Research and Market Amplification.
Draft and perform first-pass editing of tactical output, consulting threat researchers to validate assumptions, analysis, and technical accuracy.
Set and maintain editorial standards so tactical output is technically correct, distinctive to TrendAI, and published while still timely.
Escalate contested, blocked, or delayed tactical work, bringing unresolved issues to the Director.
Work with the AI and automation function to automate monitoring and drafting tasks that do not require human judgment.
Contribute to weekly top-threat communications and help deliver them to sales teams and customers with links to deeper reports.
Represent rapid response in the monthly business report and leads meeting.