Tier 2 Incident Response Analyst - Digital Security & Rights

accessnow; Philippines; Hybrid; PHP 1,402,000 - 3,505,000; Full time

Benefits offered by this job

Work-life balance

Professional development

Flexible work arrangements

Job summary

Access Now is seeking an Incident Response Analyst to strengthen the Helpline's ability to manage digital security incidents affecting its global constituency. You will work with the Helpline regional team to analyze threats, escalate cases, and build capacity to respond to security events in civil society.

Based in a hybrid setup, the role emphasizes incident handling, threat intelligence sharing, and collaboration with CSIRTs and partner organizations.

Qualifications

• Experience in incident response or escalation teams.
• Technical competency in security tools and practices.
• Interest in supporting women and/or queer communities, civil society, and human rights defenders in the region.

Responsibilities

• Support management of digital security incidents as a 2nd level incident responder (Tier 2).
• Conduct information security incident root cause analyses with the team.
• Analyze artifacts from incidents while preserving forensic evidence.
• Gather and correlate incident data to identify vulnerabilities and guide remediation.
• Learn about tools and tactics used by adversaries and defenses against them.
• Act as escalation point for technical incident handling (Tier 1) escalations.
• Help produce threat intelligence indicators and trends, review MISP events, and inform constituents.
• Support workflows to consume threat information and feeds from other groups.
• Provide expertise to CSIRTs and CSIRT communities to prevent incidents.
• Assist in onboarding and skill development of incident handlers.
• Assist in global RightsCon summit implementation.
• Perform other duties as assigned.

Skills

Incident response

Customer support escalation

Information security

Threat intelligence

MISP

CSIRT

English communication

Gender analysis awareness

Education

Bachelor or Master in CS or related field

Tools

Snort/Bro IDS

Cisco networking

Apache

Firewalls

Tails

GPG

Malware analysis

Wireshark

MySQL

VMs

SSH

VPN

TLS

PKI

HTTP/S

TCP/IP

SMTP

Javascript

C

PHP

Perl

Job description

Access Now is seeking an Incident Response Analyst to strengthen the Helpline's ability to manage digital security incidents affecting its global constituency. You will work with the Helpline regional team to analyze threats, escalate cases, and build capacity to respond to security events in civil society.

Based in a hybrid setup, the role emphasizes incident handling, threat intelligence sharing, and collaboration with CSIRTs and partner organizations.