Senior Security Incident Response Analyst

Saxo Bank; Aarhus; On-site; DKK 650,000 - 850,000; Full time

Job summary

Saxo Bank is seeking a passionate Cyber Security Analyst to help safeguard our digital assets in Copenhagen. You will focus on alert triage, incident response, and enhancing our SOC capabilities.

You will monitor security alerts, lead forensic investigations, and collaborate with threat intel and Insider Threat teams, stakeholders, and external partners to strengthen our security posture. The role emphasizes automation, playbooks, and continuous improvement.

Qualifications

• 5+ years of cybersecurity experience with a proactive and detail-oriented approach.
• Proficiency in forensics areas: binary triage, network logs, host forensics, or threat intel.
• Experience with SIEM/SOAR, endpoint security, and AI-enabled investigations; ServiceNow or similar ticketing.
• Familiarity with SOAR playbooks, automation, and alert tuning.
• Certifications such as CISSP, CISM, or SANS are advantageous.

Responsibilities

• Monitor and triage security alerts to keep our defences sharp.
• Lead forensic investigations to uncover, understand and mitigate threats.
• Collaborate with threat intelligence, Insider Threat team, stakeholders and external partners.
• Build dashboards and reports for the C-suite to maintain operational awareness.
• Mentor team members and conduct knowledge-sharing sessions.
• Contribute to automation, enhancements to detections and playbooks.
• Improve security controls and support Investigative triage for Insider Threat.

Skills

Cybersecurity forensics

Incident response

Security monitoring

Threat intelligence

Collaboration

Education

CISSP

CISM

SANS certifications

Tools

SIEM/SOAR platforms

Endpoint security platforms

ServiceNow

Job description

Copenhagen, Denmark

About the Job:

Join our team as a passionate and experienced Cyber Security Analyst to help safeguard our digital assets. In this role, you will focus on alert triage, incident response, and enhancing our Security Operations Centre (SOC).

Our multinational team leverages a diverse array of security tools, offering you a dynamic environment for learning and growth. We collaborate to investigate in-depth, with a goal to keep Saxo safe from external threats targeting our environments. You will become part of our ongoing efforts to enhance our forensic capabilities and leverage SOAR to automate triage workflows and improve detections.

Key Responsibilities:

In this role, you will be responsible for monitoring and triaging security alerts to keep our defences sharp. Additionally, you will get the opportunity to lead and conduct forensic investigations to uncover, understand and mitigate threats. Collaboration is key, as you will work closely with team members, our threat intelligence and Insider Threat team, Saxo organizational stakeholders, and external security partners to strengthen our security posture.

Further;

• Build and maintain operational awareness through trend analysis, dashboards, and reports for the C-suite.
• Mentor team members and conduct knowledge-sharing sessions to foster a culture of continuous improvement.
• Provide input to automation, enhancing detections, playbooks, and our security technology stack.
• Monitor, perform, and improve security controls to ensure robust protection.
• Investigative and triage assistance to our Insider Threat team

Your Profile:

You should have over 5 years of experience in the cybersecurity domain, demonstrating a proactive and diligent work ethic with an eye for detail. Your approach to tasks is marked by curiosity, creativity, and structure. Proficiency in one or more areas of cybersecurity forensics, such as binary triage, network log analysis, host forensics, and/or threat intelligence, is essential.

Experience with SIEM/SOAR platforms, endpoint security platforms, AI-enabled investigations, and ServiceNow or other ticketing platforms is required. Additionally, familiarity with SOAR playbooks, automation, and alert fine-tuning is a plus. Relevant certifications such as CISSP, CISM, or SANS are advantageous.

Last day for applying is 21st of October 2026.

We get curious people invested in the world

When you work at Saxo, you become a Saxonian and part of a purpose-driven organisation, where good ideas are always taken seriously, and where you can make a true impact. We are invested in your development, and you can expect a robust career from day one when you join Saxo – no matter which role you take on.

You will join 2,500 other ambitious colleagues across 11 countries and become part of an international organisation. Working in Saxo, you will get to meet colleagues from many different cultures and backgrounds, and you should know that we value diversity and inclusion and see it as a genuine source of strength to drive growth, foster innovation and position us for long-term success.

We encourage an open feedback culture and supportive team environments enabling employees to grow and fulfil their career aspirations.

When you bring passion, curiosity, drive and team spirit, your learning journey will be dynamic and your career opportunities in Saxo will be immense.

At Saxo we don’t just offer a job – we offer an opportunity to invest in your future!

How to apply :

Click here to create an account and upload your resume and a short motivation. We look forward to getting to know you better!