Senior Cyber Incident Response & Forensics Lead

Saxo Group; København; Hybrid; DKK 900,000 - 1,200,000; Full time

Job summary

Saxo Group is seeking a Senior Security Incident Response Analyst in Copenhagen. You will focus on alert triage, incident response, and strengthening the SOC through forensics and automation.

You will collaborate with threat intelligence, Insider Threat teams, and external partners to detect and mitigate threats. The role requires hands-on experience with SIEM/SOAR, endpoint security, and AI-enabled investigations, with familiarity in ticketing platforms such as ServiceNow.

Qualifications

• Experience in cybersecurity incident response and forensics.
• Proficient with security monitoring and alert triage.
• Familiar with automation and SOAR playbooks.

Responsibilities

• Monitor and triage security alerts to keep defences sharp.
• Lead and conduct forensic investigations to understand and mitigate threats.
• Collaborate with threat intelligence, Insider Threat, and external security partners.
• Build dashboards and reports for the C-suite to show trends and effectiveness.
• Mentor team members and conduct knowledge-sharing sessions.
• Provide input to automation, detections, and playbooks to improve SOC tooling.
• Monitor and improve security controls to maintain robust protection.
• Assist Insider Threat with investigations and triage.

Skills

Cybersecurity forensics

SIEM/SOAR

Endpoint security

Threat intelligence

ServiceNow or ticketing

AI-enabled investigations

Education

Certifications: CISSP, CISM or SANS

Tools

SIEM

SOAR

Endpoint security platforms

Job description

Saxo Group is seeking a Senior Security Incident Response Analyst in Copenhagen. You will focus on alert triage, incident response, and strengthening the SOC through forensics and automation.

You will collaborate with threat intelligence, Insider Threat teams, and external partners to detect and mitigate threats. The role requires hands-on experience with SIEM/SOAR, endpoint security, and AI-enabled investigations, with familiarity in ticketing platforms such as ServiceNow.