Senior Cybersecurity Analyst

🔥 0 minutes ago

🇵🇭 Philippines – Remote

⏰ Full Time

🟠 Senior

🔐 Security Analyst

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Thumbtack

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

🏪 Marketplace

☁️ SaaS

💰 $75M Debt Financing - Thumbtack on 2024-07

Marketplace • SaaS

Thumbtack is an online marketplace that connects homeowners with local service professionals for home maintenance, repairs, remodeling, and other home projects. The platform lets customers describe projects in their own words, browse local pros across many trades (e. g. , cleaners, handymen, plumbers, electricians, painters, HVAC, contractors, landscapers), view reviews and cost estimates, message pros without sharing contact details until messaging, and offers a guarantee up to $2,500 if a job isn't done as agreed. Thumbtack provides consumer-facing apps and a separate pro-focused experience with resources, community, and tools for professionals to manage leads and reviews. It covers every county in the U. S. and emphasizes project guides, cost guides, and home maintenance plans.

📋 Description

• Own day-to-day security operations, including monitoring, triage, and investigation of security alerts across production, corporate, and SaaS environments • Manage and continuously improve the SIEM through log source onboarding, parsing, normalization, detection rule development and tuning, and cost/coverage optimization • Manage the MDR partnership, including escalation workflows, SLAs, detection feedback loops, and response quality • Lead security incidents end-to-end through triage, scoping, containment, eradication, recovery, and blameless post-incident reviews • Build SOAR playbooks, detection-as-code pipelines, enrichment integrations, and response scripting to reduce manual work and response times • Conduct proactive threat hunting informed by threat intelligence and knowledge of Thumbtack’s environment • Define, track, and report operational metrics such as MTTD, MTTR, alert fidelity, and ATT&CK coverage • Apply AI tools to accelerate security operations and adapt detections, processes, and tooling to evolving threats • Partner with Security Engineering, Platform, IT, and Compliance to close detection gaps and improve security posture • Support GRC, audit evidence collection, control monitoring, endpoint security, network security, third-party risk reviews, and vulnerability management

🎯 Requirements

• 6+ years of experience in security operations, detection & response, or a related security engineering discipline • Deep hands-on experience operating and tuning a SIEM, including detection engineering and log pipeline management • Experience managing or working closely with an MDR/MSSP partner, including escalation design and holding vendors accountable to quality and SLAs • Strong incident response skills across cloud-native environments (AWS and/or GCP), SaaS applications, endpoints, and identity systems • Fluency with AI tools in daily security work, and adaptability to address novel and emerging threats, including AI-related risks • Scripting and automation proficiency (e.g. Python), with experience building SOAR playbooks, detection-as-code, or similar automation • Risk-based, analytical thinking and judgment to prioritize coverage, fidelity, and effort trade-offs • Working familiarity with GRC and compliance frameworks such as SOC 2 and PCI DSS, third-party risk assessment, and vulnerability management • Excellent written and verbal communication skills • Ability to collaborate effectively with a distributed, primarily US-based team • Currently residing anywhere in the Philippines • Authorized to work in the Philippines • Amenable to working a graveyard shift aligned with US Central Time hours, following Philippine holidays