{"id":3043991,"url":"https://alion.io/job/trend-micro-incident-response-analyst-mdr-2","title":"Incident Response Analyst - MDR","company":{"id":20752,"name":"Trend Micro","domain":"trendmicro.com","url":"https://alion.io/company/trend-micro","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":83,"open_postings":38,"ghost_share":0,"stale_share":0.684,"repost_share":0,"time_to_fill_p50_days":56,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Irving, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":103000,"max_usd":197000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":460},"experience_years_min":3,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomaly Detection","optional":false},{"name":"Autopsy","optional":false},{"name":"FTK","optional":false},{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false},{"name":"Tcpdump","optional":false},{"name":"Trend Micro","optional":false},{"name":"Volatility","optional":false},{"name":"Windows","optional":false},{"name":"Wireshark","optional":false}],"status":"live","first_seen_at":"2026-10-21T23:44:53Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-22T03:47:18Z","board_verified":false,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"TrendAI™, the global AI security leader and enterprise business unit of Trend Micro, empowers organizations with full AI visibility and consolidated security that inspires confidence, drives innovation, and eliminates risk.\nAt TrendAI™, we’re always seeking exceptional talent; people who want to collaborate with the best and push boundaries together. Here, your work goes beyond building a career. You will help protect what matters and play a vital role in shaping a safer, more trustworthy AI-powered future.\nAI Fearlessly.\n\nJob Description\nLocation: This is a hybrid role with a minimum in-office requirement of 3 days per week in the Las Colinas, Texas office located at 225 E John W Carpenter Fwy #1500, Irving, TX 75062.\nThe cybersecurity industry is at an inflection point. As adversaries evolve and detection demands accelerate, 24/7 security monitoring is transforming from reactive alert processing into intelligent, customer-centric threat defense. You'll join our Global Managed Detection & Response (MDR) team at exactly the right moment: when AI-driven alert triage and anomaly detection are enabling analysts to identify genuine threats faster, reduce false positives and focus on what matters most: knowing our customers deeply, protecting them completely and being the team they trust without question.\nAbout the Role\nIn this role, you're not just responding to breaches. You're the person customers rely on when it matters most. You'll build trusted relationships with enterprise customers, translate complex threat data into intelligence that drives decisions, and lead organisations through their most critical security moments with clarity and control. Working alongside AI systems that accelerate your investigative capabilities, you'll compress detection times from hours to minutes and deliver insights that turn incidents into lasting security improvements. Every forensic analysis you conduct, every malware sample you dissect, and every recommendation you make leaves customers measurably harder to compromise than before you arrived.\nAs an Incident Response Analyst, you'll investigate sophisticated security breaches, lead containment under pressure and become the person enterprise customers trust when everything is on the line. You'll be the critical link between TrendAI Vision One™ and customer recovery, operating across global threat operations where seconds matter, relationships are everything and AI amplifies what you're already capable of.\nYou will also play an active role in shaping how AI transforms incident response. That means contributing to automation initiatives, stress-testing AI-driven workflows and helping define how our analysts and AI systems work together to respond faster, investigate deeper and protect more effectively at scale. The analysts who join us now are not just using the tools. They are helping build them.\nCore Responsibilities\nForensic Investigation: Conduct root cause analysis of security breaches; determine attack vectors, scope and business impact with precision and accountability.\nIncident Response: Lead containment and threat eradication using TrendAI Vision One™, coordinating across internal teams and customer stakeholders from first alert to resolution.\nThreat Analysis & Detection: Analyze malware and threat components; develop and refine detection rules; generate threat intelligence and IoCs.\nCustomer Reporting: Create executive-ready incident reports; deliver briefings to stakeholders; recommend security improvements.\nProactive Threat Operations: Hunt for advanced threat indicators across customer networks; improve detection logic and fidelity.\nAI Orchestration: Contribute to automation and AI initiatives that compress response times, reduce analyst burden, and sharpen the overall quality of MDR delivery.\nRequired Qualifications\nBachelor's degree in Computer Science, Cybersecurity, Information Security, or related field\n3+ years in security operations with demonstrated expertise in:\nIncident response and forensics;\nMalware analysis and threat investigation;\nSOC operations or security monitoring.\nTechnical Competencies:\nAI in Practice: Familiarity with how AI and automation are reshaping incident response workflows, from alert triage to forensic analysis. Curiosity about where it's going matters as much as where you are today.\n OS & Network Forensics: Advanced Windows and Linux forensics (registry, event logs, artifacts, filesystem analysis).\nForensics Tools: SIFT Workstation, WinPMEM, dd/dclfdd, Autopsy, Volatility Framework, FTK Imagerm Wireshark, Bro/SiLK, Netflow, tcpdump - or similar OS/Network Tools.\nLog Analysis & Correlation: SIEM platforms, syslog analysis, event correlation procedures\nMalware analysis: Static and dynamic analysis techniques.\nThreat Intelligence: Understand threat actor TTPs and MITRE ATT&CK framework alignment; contribute to organizational threat intelligence. Leverage threat intelligence platforms.\nTrendAI familiarity: Working knowledge of the Vision One platform or equivalent threat intelligence/XDR platforms.\nProfessional Certifications (highly desired):\nGCIH (GIAC Certified Incident Handler).\nGCFA / GCFE (GIAC Certified Forensic Analyst / Examiner).\nCISSP or OSCP.\nProfessional Attributes:\nStrong written and verbal communication, ability to translate complex forensic findings for technical and executive audiences.\nSelf-directed learner with aptitude for rapidly mastering new tools and threat landscapes.\nComfortable working under pressure; thrives in fast-paced, high-stakes environments.\nAbility to work 24/7 rotating shifts, including nights, weekends, and holidays.\nWilling to travel when required. \nStrong analytical and problem-solving skills with ability to work effectively in a global team environment.\nComfortable speaking to customer via e-mail, chat and phone. \nWhat We Offer You:\nYou're important to us. What matters to you, matters to us too. TrendAI provides benefit options for you and your family. Here some of the top-rated benefits that employees enjoy today:\nComprehensive health benefits and paid time off package\nPre-partum, maternity, parental, medical leave and adoption assistance \nMental Health Wellness Program & Annual Wellness Incentive\n401(k) with company match\nPet Insurance\nCollaborative and innovative culture\nWe are committed to fostering a professional, respectful, and inclusive work environment that promotes collaboration and high performance. We value diverse backgrounds and perspectives and welcome candidates who bring unique strengths and experiences. If you’re excited about this role and believe you can contribute and grow with us, we encourage you to apply.\nBe Passionate. Be Innovative. Be a Trender.\nThis position does not offer sponsorship for work permit applications or renewals, either now or in the future.\nCandidates must be authorized to work in the U.S. without the need for employment-based visa sponsorship, both currently and moving forward. The company will not sponsor applicants for U.S. work visa status for this role (including, but not limited to, H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT, or any other employment-based visa).#LI-JL\nAt Trend Micro, we embrace change, empower people, and encourage innovation in a connected world. Our diversity and multicultural workforce are key contributing factors to our success across the globe. Trend Micro provides equal employment opportunity for all applicants and employees. Trend Micro does not unlawfully discriminate on the basis of race, color, religion, sex, pregnancy and childbirth or related medical conditions, national origin, ancestry, age, physical or mental disability, medical condition, family care leave status, veteran status, marital status, sexual orientation, or gender identity.","description_format":"text","description_chars":7781,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Security Operations","Managed Security","Email Security"],"lifecycle":[{"event":"open","at":"2026-10-21T23:44:53Z"}],"visa":[],"liveness":{"score":57,"band":"ok","label":"Likely open","p_open":0.9,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":56,"reasons":["conf:50","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/trend-micro-incident-response-analyst-mdr-2","json_url":"https://alion.io/job/trend-micro-incident-response-analyst-mdr-2.json","meta":{"generated_at":"2026-10-25T04:53:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6579,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":20752},"rest":"https://alion.io/mcp/rest/get_company?id=20752"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftrend-micro-incident-response-analyst-mdr-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftrend-micro-incident-response-analyst-mdr-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftrend-micro-incident-response-analyst-mdr-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/trend-micro-incident-response-analyst-mdr-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftrend-micro-incident-response-analyst-mdr-2"}]}