Incident Response Analyst

accessnow; Philippines; Hybrid; PHP 1,402,000 - 3,505,000; Full time

Benefits offered by this job

Work-life balance

Professional development

Flexible work arrangements

Job summary

Access Now is seeking an Incident Response Analyst to strengthen the Helpline's ability to manage digital security incidents affecting its global constituency. You will work with the Helpline regional team to analyze threats, escalate cases, and build capacity to respond to security events in civil society.

Based in a hybrid setup, the role emphasizes incident handling, threat intelligence sharing, and collaboration with CSIRTs and partner organizations.

Qualifications

• Experience in incident response or escalation teams.
• Technical competency in security tools and practices.
• Interest in supporting women and/or queer communities, civil society, and human rights defenders in the region.

Responsibilities

• Support management of digital security incidents as a 2nd level incident responder (Tier 2).
• Conduct information security incident root cause analyses with the team.
• Analyze artifacts from incidents while preserving forensic evidence.
• Gather and correlate incident data to identify vulnerabilities and guide remediation.
• Learn about tools and tactics used by adversaries and defenses against them.
• Act as escalation point for technical incident handling (Tier 1) escalations.
• Help produce threat intelligence indicators and trends, review MISP events, and inform constituents.
• Support workflows to consume threat information and feeds from other groups.
• Provide expertise to CSIRTs and CSIRT communities to prevent incidents.
• Assist in onboarding and skill development of incident handlers.
• Assist in global RightsCon summit implementation.
• Perform other duties as assigned.

Skills

Incident response

Customer support escalation

Information security

Threat intelligence

MISP

CSIRT

English communication

Gender analysis awareness

Education

Bachelor or Master in CS or related field

Tools

Snort/Bro IDS

Cisco networking

Apache

Firewalls

Tails

GPG

Malware analysis

Wireshark

MySQL

VMs

SSH

VPN

TLS

PKI

HTTP/S

TCP/IP

SMTP

Javascript

C

PHP

Perl

Job description

The Organization and Role

About Access Now

Access Now defends and extends the digital rights of people and communities at risk. As a grassroots-to-global organization, we partner with local actors to bring a human rights agenda to the use, development, and governance of digital technologies, and to intervene where technologies adversely impact our human rights. By combining direct technical support, strategic advocacy, grassroots grantmaking, and convenings such as RightsCon, we fight for human rights in the digital age.

About this role

The Incident Response Analyst helps to manage the incident response efforts of the global, Access Now Helpline team. The Incident Response Analyst works closely with the Helpline regional team of incident handlers to analyze threats, and to elevate cases as needed. The Analyst helps to build and strengthen the Helpline’s capacity to respond to digital security incidents affecting Access Now’s constituency.

The Incident Response Analyst works closely with the Helpline Team, and reports through the Helpline’s Incident Response Manager.

What you will do

• Support management of digital security incidents, such as instances of account compromise, malware, phishing and data leak, by serving as a 2nd level incident responder (Tier 2)
  
• Support the team of incident handlers in conducting information security incident root cause analyses
• Analyze and gain understanding of artifacts related to incidents managed by the Helpline, taking into consideration the need to preserve forensic evidence
• Gather and correlate incident data to identify specific vulnerabilities and make recommendations that enable preparation and remediation both in individual cases and in response to trends affecting larger communities
• Continuously learn about tools, techniques and tactics used by adversaries and the techniques used to defend against them
• Serve as second level escalation point for the Incident Handling team on technical escalations related to incident response, providing guidance proactively or in reply to incident handlers (Tier 1) escalations requests
• Strengthen the Helpline’s ability to produce and share quality threat intelligence indicators and trends, including by reviewing MISP events, supporting the development of public or confidential security advisories to inform constituents of the current situational picture and how it may be changing
• Support the development of workflows and processes to increase the Helpline’s ability to consume threat information and feeds, including by following threat intelligence work done by other organizations and groups to better inform the Helpline’s work and protect it’s beneficiaries
• Provide expertise to other security experts, CSIRTs, and CSIRT communities from Civil Society, including within CiviCERT, in order to help prevent and mitigate digital security incidents
• Support the Helpline efforts to develop the skills and expertise of incident handlers (tier 1), including by supporting onboarding efforts and relevant internal working groups
• Assist in global implementation of the annual RightsCon summit series
• Perform other duties as assigned

Skills, education, and mindset you will bring

• Demonstrated experience working in incident response or customer support escalation teams
  
• Core technical competency, informally or formally
• Prior experience working with, or interest in supporting women and/or queer communities, civil society, and human rights defender organizations in the region
• Familiarity with anonymity and circumvention tools, security technologies, and risk assessment frameworks
• Familiarity with: Snort or Bro IDS; Cisco networking; Apache; Firewalls; Tails; GPG encrypted email; malware analysis; web development; Perl; C; PHP; Javascript; Wireshark; MySQL; Wifi; TCP/IP; SMTP; HTTP/S; TLS; PKI; VPN; VM; or SSH
• Skills in gender analysis and awareness
• Strong cultural understanding and experience across the region
• Interest in training and user education
• Excellent English written and verbal communication skills
• Fluency in other languages beside English
• Appropriate education and work preparation for the role, with bachelor or master degree equivalent in computer science (or similar) preferred

The Details

Location

This is a full-time position, with preference for Philippines, Indonesia and India. The successful candidate must possess the right to work in the location in which they will be based. At this time, most Access Now Team Members are working through hybrid office arrangements, combining remote at-home work with intermittent use of offices and/or co-working spaces.

Remuneration

Access Now offers competitive compensation and benefits packages that align competitively with locations and regions around the world. Location-specific examples of initial placement within the salary range for this role include:

• ₱100,478.17 gross monthly (Philippines)
• Rp40,500,000.00 gross monthly (Indonesia)
• ₹163,200.00 gross monthly (India)

Benefits for this specific role are tied to the location, and will vary. Regardless of location, all Team Members benefit from a strong global culture aligned around:

• Work-life balance...including a generous paid time-off program between 36 and 40 days annually
• Access to supplemental health care insurance policies
• Professional development and growth opportunities
• Extensive workplace flexibility
• Organizational resilience and support for all team members, including paid family leave and employee assistance programs
• Connection to a diverse, global team of passionate, principled professionals
• Opportunities to recharge (including one month of paid refresher leave after 4 years)

We are a global human rights organization committed to inclusivity and equity, and seek the most talented team members who bring their true selves, with diverse backgrounds, cultures, perspectives, and experiences. We are interested in receiving applications from people who consider themselves as under-represented in their talent communities. As an equal opportunity employer, we value and encourage diversity and consider applicants for all positions without regard to race, color, religion, creed, gender, sex, national origin, age, disability, marital or veteran status, sexual orientation, gender identity or expression, or any other legally protected status. Our commitment applies with regard to all aspects of one’s employment, including hiring, transfer, promotion, compensation, eligibility for benefits, and termination.

Published 2026-08-07