Senior Security Incident Response Analyst

Saxo Group; København; Hybrid; DKK 900,000 - 1,200,000; Full time

Job summary

Saxo Group is seeking a Senior Security Incident Response Analyst in Copenhagen. You will focus on alert triage, incident response, and strengthening the SOC through forensics and automation.

You will collaborate with threat intelligence, Insider Threat teams, and external partners to detect and mitigate threats. The role requires hands-on experience with SIEM/SOAR, endpoint security, and AI-enabled investigations, with familiarity in ticketing platforms such as ServiceNow.

Qualifications

• Experience in cybersecurity incident response and forensics.
• Proficient with security monitoring and alert triage.
• Familiar with automation and SOAR playbooks.

Responsibilities

• Monitor and triage security alerts to keep defences sharp.
• Lead and conduct forensic investigations to understand and mitigate threats.
• Collaborate with threat intelligence, Insider Threat, and external security partners.
• Build dashboards and reports for the C-suite to show trends and effectiveness.
• Mentor team members and conduct knowledge-sharing sessions.
• Provide input to automation, detections, and playbooks to improve SOC tooling.
• Monitor and improve security controls to maintain robust protection.
• Assist Insider Threat with investigations and triage.

Skills

Cybersecurity forensics

SIEM/SOAR

Endpoint security

Threat intelligence

ServiceNow or ticketing

AI-enabled investigations

Education

Certifications: CISSP, CISM or SANS

Tools

SIEM

SOAR

Endpoint security platforms

Job description

## Senior Security Incident Response AnalystApply: Headquarters: Full time: Posted Today: R-19408Copenhagen, Denmark **About the Job:** Join our team as a passionate and experienced Cyber Security Analyst to help safeguard our digital assets. In this role, you will focus on alert triage, incident response, and enhancing our Security Operations Centre (SOC).Our multinational team leverages a diverse array of security tools, offering you a dynamic environment for learning and growth. We collaborate to investigate in-depth, with a goal to keep Saxo safe from external threats targeting our environments. You will become part of our ongoing efforts to enhance our forensic capabilities and leverage SOAR to automate triage workflows and improve detections.**Key Responsibilities:**In this role, you will be responsible for monitoring and triaging security alerts to keep our defences sharp. Additionally, you will get the opportunity to lead and conduct forensic investigations to uncover, understand and mitigate threats. Collaboration is key, as you will work closely with team members, our threat intelligence and Insider Threat team, Saxo organizational stakeholders, and external security partners to strengthen our security posture. Further;* Build and maintain operational awareness through trend analysis, dashboards, and reports for the C-suite.* Mentor team members and conduct knowledge-sharing sessions to foster a culture of continuous improvement.* Provide input to automation, enhancing detections, playbooks, and our security technology stack.* Monitor, perform, and improve security controls to ensure robust protection.* Investigative and triage assistance to our Insider Threat team **Your Profile:**You should have over 5 years of experience in the cybersecurity domain, demonstrating a proactive and diligent work ethic with an eye for detail. Your approach to tasks is marked by curiosity, creativity, and structure. Proficiency in one or more areas of cybersecurity forensics, such as binary triage, network log analysis, host forensics, and/or threat intelligence, is essential. Experience with SIEM/SOAR platforms, endpoint security platforms, AI-enabled investigations, and ServiceNow or other ticketing platforms is required. Additionally, familiarity with SOAR playbooks, automation, and alert fine-tuning is a plus. Relevant certifications such as CISSP, CISM, or SANS are advantageous. **Last day for applying is 21st of October 2026.****We get curious people invested in the world**When you work at Saxo, you become a Saxonian and part of a purpose-driven organisation, where good ideas are always taken seriously, and where you can make a true impact. We are invested in your development, and you can expect a robust career from day one when you join Saxo – no matter which role you take on.You will join 2,500 other ambitious colleagues across 11 countries and become part of an international organisation. Working in Saxo, you will get to meet colleagues from many different cultures and backgrounds, and you should know that we value diversity and inclusion and see it as a genuine source of strength to drive growth, foster innovation and position us for long-term success. We encourage an open feedback culture and supportive team environments enabling employees to grow and fulfil their career aspirations. When you bring passion, curiosity, drive and team spirit, your learning journey will be dynamic and your career opportunities in Saxo will be immense. At Saxo we don’t just offer a job – we offer an opportunity to invest in your future!**How to apply :** Click here to create an account and upload your resume and a short motivation. We look forward to getting to know you better!