Senior Cybersecurity Analyst — Detection, IR & Automation

Thumbtack; Philippines; On-site; PHP 4,367,000 - 6,862,000; Full time

Job summary

Thumbtack’s Security Engineering team is building a fast, high-fidelity detection and response capability. We’re looking for a Cybersecurity Senior Analyst to lead day-to-day security operations, tune our SIEM, and partner with an MDR provider to strengthen our security posture.

You’ll own incident response end-to-end, build detection-as-code, and apply AI tools to accelerate operations while collaborating with a distributed, US-based team.

Qualifications

• 6+ years in security operations, detection & response, or related field.
• Hands-on experience operating and tuning a SIEM, including detection engineering and log pipeline management.
• Experience managing or working closely with an MDR/MSSP partner, including escalation design and SLAs.
• Strong incident response skills across cloud-native environments (AWS and/or GCP), SaaS apps, endpoints, and identity systems.
• Fluency with AI tools in daily security work, and adaptability to evolve detections and tooling.
• Scripting and automation proficiency (e.g. Python) with SOAR playbooks or similar automation.
• Risk-based, analytical thinking and ability to prioritize critical signals over noise.
• Familiarity with GRC and compliance frameworks (SOC 2, PCI DSS) and vulnerability management; able to support them.
• Excellent written and verbal communication; ability to collaborate with a distributed, primarily US-based team.

Responsibilities

• Own day-to-day security operations: monitoring, triage, and investigation of security alerts across production, corporate, and SaaS environments.
• Manage and improve our SIEM: onboarding, parsing, normalization, detection rule tuning, and cost/coverage optimization.
• Manage MDR partnership: escalation workflows, SLAs, detection feedback loops, and quality of response.
• Lead security incidents end-to-end: triage, scoping, containment, eradication, recovery, post-incident reviews.
• Build automation to reduce toil: SOAR playbooks, detection-as-code pipelines, enrichment integrations, response scripting.
• Conduct proactive threat hunting informed by threat intel and Thumbtack’s environment.
• Define, track, and report operational metrics; use them to drive improvement.
• Apply AI tools to accelerate security operations and adapt detections and tooling for evolving threats.
• Collaborate with Security Engineering, Platform, IT, and Compliance to close gaps and improve posture.
• Support broader security program: GRC, endpoint security, network security, third-party risk, vulnerability management.

Skills

Security operations

SIEM tuning

MDR/MSSP

Incident response

Python scripting

AI tools

GRC familiarity

Communication

Tools

SIEM

SOAR

Job description

Thumbtack’s Security Engineering team is building a fast, high-fidelity detection and response capability. We’re looking for a Cybersecurity Senior Analyst to lead day-to-day security operations, tune our SIEM, and partner with an MDR provider to strengthen our security posture.

You’ll own incident response end-to-end, build detection-as-code, and apply AI tools to accelerate operations while collaborating with a distributed, US-based team.