Security Operations Lead — Detection & Response

Thumbtack Philippines; Philippines; On-site; PHP 1,200,000 - 2,400,000; Full time

Job summary

Thumbtack Philippines seeks a Cybersecurity Senior Analyst to strengthen detection and response across cloud, SaaS, endpoints, and identity systems. You will own day-to-day security operations, tune SIEM, manage MDR partnerships, and drive automation with SOAR and detection-as-code, while collaborating with global teams to reduce risk and improve security posture.

The role emphasizes incident response leadership, proactive threat hunting, and metrics-driven reporting on MTTD/MTTR, with

Qualifications

• 6+ years in security operations, detection & response.
• Hands-on SIEM tuning and log pipeline management.
• Experience with MDR/MSSP partnerships and SLAs.
• Strong incident response across cloud and SaaS environments.
• Fluency with AI tools in daily security work.
• Scripting and automation (Python), with SOAR playbooks.
• Analytical, risk-based thinking to prioritize coverage vs. noise.
• Familiarity with GRC and compliance frameworks (SOC 2, PCI DSS).
• Excellent written and verbal communication with a distributed US-based team.

Responsibilities

• Own day-to-day security operations: monitor, triage, investigate alerts across prod, corporate, and SaaS.
• Tune and improve SIEM: log onboarding, parsing, normalization, and rule development.
• Manage MDR partnership: escalation workflows and SLAs.
• Lead security incidents end-to-end: containment, eradication, recovery, post-incident reviews.
• Build automation: SOAR playbooks, detection-as-code, enrichment integrations.
• Conduct proactive threat hunting informed by threat intel.
• Define, track, and report metrics like MTTD/MTTR and ATT&CK coverage.
• Apply AI tools to accelerate security operations and adapt detections.
• Partner with Security Eng, Platform, IT, and Compliance to close gaps.
• Support broader security program: GRC, endpoint/network security, third-party risk.

Skills

Security operations

SIEM tuning

Incident response

Threat hunting

Python scripting

AI in security

Tools

SIEM

SOAR

Python

Job description

Thumbtack Philippines seeks a Cybersecurity Senior Analyst to strengthen detection and response across cloud, SaaS, endpoints, and identity systems. You will own day-to-day security operations, tune SIEM, manage MDR partnerships, and drive automation with SOAR and detection-as-code, while collaborating with global teams to reduce risk and improve security posture.

The role emphasizes incident response leadership, proactive threat hunting, and metrics-driven reporting on MTTD/MTTR, with