Senior Security Incident Response Analyst

Saxo Group India Private Limited (SGIPL); Denmark; On-site; DKK 700,000 - 1,000,000; Full time

Job summary

Saxo Bank in Copenhagen is seeking a Cyber Security Analyst to safeguard digital assets, focusing on alert triage, incident response, and SOC enhancements. You will monitor, investigate, and improve security controls while collaborating with threat intelligence and insider threat teams.

The role includes mentoring colleagues and contributing to automation workflows. The candidate will drive detections, build operational dashboards for the C-suite, and participate in cross-functional security

Qualifications

• Minimum 5 years in cybersecurity with hands-on experience in forensics, incident response, and SOC operations.
• Proficient with SIEM/SOAR platforms, endpoint security, and threat intelligence workflows.
• Familiarity with SOAR playbooks, automation, and alert tuning is a plus.

Responsibilities

• Monitor and triage security alerts to maintain strong defenses.
• Lead forensic investigations to uncover, understand, and mitigate threats.
• Collaborate with threat intel, Insider Threat, and stakeholders to strengthen security posture.
• Create dashboards and reports for executive audiences and mentor team members.

Skills

SIEM/SOAR

Endpoint security

Threat intelligence

Automation & detections

Education

Cybersecurity certifications (CISSP/CISM/SANS)

Tools

ServiceNow

SOAR platforms

Endpoint security tools

Job description

Copenhagen, Denmark

About the Job

Join our team as a passionate and experienced Cyber Security Analyst to help safeguard our digital assets. In this role, you will focus on alert triage, incident response, and enhancing our Security Operations Centre (SOC). Our multinational team leverages a diverse array of security tools, offering you a dynamic environment for learning and growth. We collaborate to investigate in-depth, with a goal to keep Saxo safe from external threats targeting our environments. You will become part of our ongoing efforts to enhance our forensic capabilities and leverage SOAR to automate triage workflows and improve detections.

Key Responsibilities

In this role, you will be responsible for monitoring and triaging security alerts to keep our defences sharp. Additionally, you will get the opportunity to lead and conduct forensic investigations to uncover, understand and mitigate threats. Collaboration is key, as you will work closely with team members, our threat intelligence and Insider Threat team, Saxo organizational stakeholders, and external security partners to strengthen our security posture. Further; Build and maintain operational awareness through trend analysis, dashboards, and reports for the C‑suite. Mentor team members and conduct knowledge-sharing sessions to foster a culture of continuous improvement. Provide input to automation, enhancing detections, playbooks, and our security technology stack. Monitor, perform, and improve security controls to ensure robust protection. Investigative and triage assistance to our Insider Threat team.

Your Profile

You should have over 5 years of experience in the cybersecurity domain, demonstrating a proactive and diligent work ethic with an eye for detail. Your approach to tasks is marked by curiosity, creativity, and structure. Proficiency in one or more areas of cybersecurity forensics, such as binary triage, network log analysis, host forensics, and/or threat intelligence, is essential. Experience with SIEM/SOAR platforms, endpoint security platforms, AI‑enabled investigations, and ServiceNow or other ticketing platforms is required. Additionally, familiarity with SOAR playbooks, automation, and alert fine‑tuning is a plus. Relevant certifications such as CISSP, CISM, or SANS are advantageous.

Last day for applying is 21st of October 2026.

Why join us / Company Culture

We get curious people invested in the world. When you work at Saxo, you become a Saxonian and part of a purpose‑driven organisation, where good ideas are always taken seriously, and where you can make a true impact. We are invested in your development, and you can expect a robust career from day one when you join Saxo – no matter which role you take on. You will join 2,500 other ambitious colleagues across 11 countries and become part of an international organisation. Working in Saxo, you will get to meet colleagues from many different cultures and backgrounds, and you should know that we value diversity and inclusion and see it as a genuine source of strength to drive growth, foster innovation and position us for long‑term success. We encourage an open feedback culture and supportive team environments enabling employees to grow and fulfil their career aspirations. When you bring passion, curiosity, drive and team spirit, your learning journey will be dynamic and your career opportunities in Saxo will be immense. At Saxo we don’t just offer a job – we offer an opportunity to invest in your future!

About Saxo Bank

Support our purpose. We believe access to global capital markets is not only for the privileged few. Our vision is to enable people to fulfill their financial aspirations to make an impact. That’s why we use the power of technology to deliver clients what they need, when they need it in a user‑friendly and personalised experience. We aim to deliver the world’s most user‑friendly and personalized trading and investment platform experience, which gives our clients exactly what they need to make more informed investment decisions.

• Continuously strives to improve the Saxo Experience and exceed our clients’ expectations.
• Always invests in the future
• Builds unrivalled platforms for seasoned and experienced investors and wholesale clients that provide real‑time access to global capital markets.
• Consistently wins the highest accolades for our platforms, products and services.

More about Saxo Bank

For more on our story, culture and identity, please read the Saxo Bank Foundation, written by our CEO and founder Kim Fournais.