Sr. Security Analyst - MDR

Trend Micro•Irving, TX

1d•Hybrid

About The Position

TrendAI™, the global AI security leader and enterprise business unit of Trend Micro, empowers organizations with full AI visibility and consolidated security that inspires confidence, drives innovation, and eliminates risk. At TrendAI™, we’re always seeking exceptional talent; people who want to collaborate with the best and push boundaries together. Here, your work goes beyond building a career. You will help protect what matters and play a vital role in shaping a safer, more trustworthy AI-powered future. AI Fearlessly. This is a hybrid role with a minimum in-office requirement of 3 days per week in the Las Colinas, Texas office located at 225 E John W Carpenter Fwy #1500, Irving, TX 75062. The cybersecurity industry is at an inflection point. As adversaries evolve and detection demands accelerate, 24/7 security monitoring is transforming from reactive alert processing into intelligent, customer-centric threat defense. You'll join our Global Managed Detection & Response (MDR) team at exactly the right moment: when AI-driven alert triage and anomaly detection are enabling analysts to identify genuine threats faster, reduce false positives and focus on what matters most: knowing our customers deeply, protecting them completely and being the team they trust without question. In this role, you're not just monitoring alerts. You're building the foundation of trusted customer partnerships by translating security events into clear, actionable intelligence. Working alongside AI systems that accelerate your detection capabilities, you'll distinguish genuine threats from noise, contain emerging incidents and deliver the kind of clear, confident communication that customers rely on when it matters most. As a Security Analyst, you'll be the first line of defense, monitoring security events across Fortune 500 enterprises and critical infrastructure. You'll investigate real-time alerts, analyze suspicious behavior through the MITRE ATT&CK framework and contribute to the continuous refinement of detection rules that improve our collective ability to predict and prevent threats.

Requirements

Bachelor's degree in Computer Science, Cybersecurity, Information Security or related field.
3-5 years in a full-time security position, preferably in a SOC environment or security monitoring role.
Experience with log analysis, event correlation and understanding of host and network log sources; familiarity with SIEM platforms.
Proficiency in network security concepts, firewalls and traffic analysis.
Working knowledge of Windows and Linux environments; ability to identify suspicious system behavior.
Experience with real-time alert investigation and prioritization; ability to distinguish signal from noise.
Working knowledge of the Vision One platform or equivalent threat intelligence/XDR platforms.
Fundamental understanding of AI/ML concepts and use cases.
Strong aptitude for learning; self-directed and capable of rapidly mastering new tools and threat landscapes.
Comfortable thriving in a fast-paced, 24/7 operations environment.
Strong written and verbal communication, ability to translate security findings for both technical and non-technical stakeholders
Strong analytical and problem-solving skills with ability to work effectively in a global team environment
Comfortable speaking to customer via e-mail, chat and phone.
Candidates must be authorized to work in the U.S. without the need for employment-based visa sponsorship, both currently and moving forward.
The company will not sponsor applicants for U.S. work visa status for this role (including, but not limited to, H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT, or any other employment-based visa).

Responsibilities

Contribute to automation and AI initiatives that accelerate alert triage, reduce analyst burden and raise the overall quality and consistency of MDR delivery.
Monitor and analyze security events (Endpoint/Email/Server/Network) using TrendAI Vision One to identify anomalous activities and investigate real-time alerts within customer environments.
Prioritize and differentiate between genuine intrusion attempts and false positives; evaluate unknown or suspicious behavior to determine true threat status.
Take rapid measures to contain, eradicate and mitigate threat impact with clear communication to customers.
Review security events and data sources to develop and refine detection criteria; contribute to improved malware analysis and threat prevention solutions.
Compose detailed security alert notifications with investigation findings, containment actions taken, and actionable recommendations for customers.
Generate threat intelligence from incident analysis; identify patterns and trends to improve organizational threat posture.