Senior Security Incident Response Analyst

Copenhagen, Denmark

About the Job:

Join our team as a passionate and experienced Cyber Security Analyst to help safeguard our digital assets. In this role, you will focus on alert triage, incident response, and enhancing our Security Operations Centre (SOC).

Our multinational team leverages a diverse array of security tools, offering you a dynamic environment for learning and growth. We collaborate to investigate in-depth, with a goal to keep Saxo safe from external threats targeting our environments. You will become part of our ongoing efforts to enhance our forensic capabilities and leverage SOAR to automate triage workflows and improve detections.

Key Responsibilities:

In this role, you will be responsible for monitoring and triaging security alerts to keep our defences sharp. Additionally, you will get the opportunity to lead and conduct forensic investigations to uncover, understand and mitigate threats. Collaboration is key, as you will work closely with team members, our threat intelligence and Insider Threat team, Saxo organizational stakeholders, and external security partners to strengthen our security posture.

Further;

• Build and maintain operational awareness through trend analysis, dashboards, and reports for the C-suite.
• Mentor team members and conduct knowledge-sharing sessions to foster a culture of continuous improvement.
• Provide input to automation, enhancing detections, playbooks, and our security technology stack.
• Monitor, perform, and improve security controls to ensure robust protection.
• Investigative and triage assistance to our Insider Threat team

Your Profile:

You should have over 5 years of experience in the cybersecurity domain, demonstrating a proactive and diligent work ethic with an eye for detail. Your approach to tasks is marked by curiosity, creativity, and structure. Proficiency in one or more areas of cybersecurity forensics, such as binary triage, network log analysis, host forensics, and/or threat intelligence, is essential.

Experience with SIEM/SOAR platforms, endpoint security platforms, AI-enabled investigations, and ServiceNow or other ticketing platforms is required. Additionally, familiarity with SOAR playbooks, automation, and alert fine-tuning is a plus. Relevant certifications such as CISSP, CISM, or SANS are advantageous.

Last day for applying is 21st of October 2026.

We get curious people invested in the world

When you work at Saxo, you become a Saxonian and part of a purpose-driven organisation, where good ideas are always taken seriously, and where you can make a true impact. We are invested in your development, and you can expect a robust career from day one when you join Saxo – no matter which role you take on.

You will join 2,500 other ambitious colleagues across 11 countries and become part of an international organisation. Working in Saxo, you will get to meet colleagues from many different cultures and backgrounds, and you should know that we value diversity and inclusion and see it as a genuine source of strength to drive growth, foster innovation and position us for long-term success.

We encourage an open feedback culture and supportive team environments enabling employees to grow and fulfil their career aspirations.

When you bring passion, curiosity, drive and team spirit, your learning journey will be dynamic and your career opportunities in Saxo will be immense.

At Saxo we don’t just offer a job – we offer an opportunity to invest in your future!

How to apply :

Click here to create an account and upload your resume and a short motivation. We look forward to getting to know you better!