Note: The job is a remote job and is open to candidates in USA. TrendAI, the enterprise business unit of Trend Micro, is hiring a Senior Threat Analyst to lead the TRII rapid response function globally. The role builds and runs the response model, determines which threat signals warrant publication, drafts and edits time-sensitive analysis, and coordinates with research, marketing, AI and automation teams.
Responsibilities
- Own the rapid response model globally for TRII, scaling the existing framework from regional implementation to the standard the whole team works to, and finalizing the RACI with Threat Ops, AI Labs and Threat Hunt
- Run the activation path end to end: signal, score, tier, activate. Decide what TRII responds to, at what tier, and against what service level, holding P0 to a one to two day turnaround and keeping tactical publication inside the one to three day cycle
- Merge the two scoring systems now in use into one. A story should be scored once, and that score should route both publication and commercial activation rather than running as two parallel judgments
- Close the gap between the threat rapid response process and the market signals process run by product marketing, so that TRII operates one process rather than negotiating between two
- Stand up and run the listening function for threat, incident and breach signals, and for the market news that matters, working with Threat Research and Market Amplification rather than duplicating what they already watch
- Carry the drafting and first-pass editing of tactical output, working with threat researchers as expert reference to validate assumptions, analysis and technical accuracy rather than routing drafts to them for authorship
- Set and hold the editorial standard for tactical output: technically correct, saying something TrendAI is uniquely positioned to say, and reaching publication without losing the timeliness that made it worth publishing
- Serve as the escalation point for tactical work that is contested, blocked or moving too slowly, and bring it to the Director when it cannot be resolved inside the function
- Work with the AI and automation function to automate the monitoring and drafting steps that do not need a person, so that analyst time goes to judgment rather than collection
- Contribute to the weekly cadence of top threats communications, and to getting that work to the sales teams and customers with links back to the deeper reports
- Represent rapid response in the monthly business report and the leads meeting
Skills
- Substantial experience as a cyber threat intelligence analyst, including a record of publishing analysis under time pressure that held up afterward
- Strong technical writing. You can take work from a technically deep source and make it land with a CISO, a practitioner and a journalist without flattening what makes it interesting
- Breadth across the threat landscape. This role reads across nation state activity, criminal operations, vulnerabilities and emerging AI threats, and decides quickly what deserves a response
- Judgment about what is worth publishing. A good deal of the value of this role is the decision not to respond to something
- Experience building or materially improving a process, not only working inside one
- Comfort working asynchronously across a distributed team, and the discipline to write things down so that work survives a handoff
- Risk modeling or quantitative threat assessment
- Experience with incident communications or newsroom-style operations
- Familiarity with Jira-based intake and editorial workflow
- Experience working alongside automated drafting or summarization tooling
- Public speaking, briefing or media experience
Company Overview
Company H1B Sponsorship