You and the process

With a person
Anna, in-house recruiter
9 years hiring engineers
30 minutes with a real recruiter
They read your CV with you, on a call, and say where the offers are being lost.
Didn’t find what you were looking for? Tell us what to build
Saxo Bank

Senior Security Incident Response Analyst

  • Office
  • 6+ years

Salary

Not stated

Similar roles pay €60K - 100K a year · our estimate

AI summary

For members

The whole posting in a few lines. Sign up to read it here and on every role you open.

Sign Up to Read

Description

This Copenhagen, Denmark role is a senior position in the security operations centre (SOC), focused on alert triage and incident response.

The multinational team uses a wide range of security tools and investigates issues thoroughly to protect the company from external threats.

You will help build the team's forensic capabilities and use SOAR to automate triage and sharpen detections.

The company has about 2,500 employees across 11 countries.

Responsibilities

  • Monitor security alerts and triage them.
  • Lead and carry out forensic investigations to find, understand and contain threats.
  • Work with colleagues, the threat intelligence and Insider Threat teams, company stakeholders and external security partners to strengthen the security posture.
  • Support the Insider Threat team with investigations and triage.
  • Produce trend analysis, dashboards and reports on operational status for the C-suite.
  • Coach team members and run knowledge-sharing sessions to keep improving how the team works.
  • Contribute ideas on automation, detection rules, playbooks and the security technology stack.
  • Run, improve and check security controls.

Requirements

  • More than 5 years of experience in cybersecurity.
  • Attention to detail, a proactive and careful approach, and curiosity, creativity and a structured way of working.
  • Essential: strong skills in at least one area of security forensics, such as binary triage, network log analysis, host forensics or threat intelligence.
  • Hands-on experience with SIEM and SOAR platforms, endpoint security platforms, AI-enabled investigation tools, and ServiceNow or another ticketing platform.
  • A plus: knowledge of SOAR playbooks, automation and alert tuning.
  • Advantageous: certifications such as CISSP, CISM or SANS.

Conditions

Location: Copenhagen, Denmark.

Applications close on 21 October 2026.

Applicants are assessed on merit, and the company values diversity and inclusion.

To apply, create an account and upload your CV and a short motivation letter.

Benefits

  • The company invests in your development and offers a clear path for career growth.
  • You will work with an open feedback culture and supportive team members.

Where you’d work

From the office

About the company

Saxo Bank

  • Industry: FinTech

Office in Denmark

Also hiring in Amsterdam, Netherlands and Netherlands

Your chances

Worth a look before you spend an evening tailoring a CV for it.

  • 19 checks run
  • 2 red flags

Still hiring?

13 checks

1 red flag

How crowded?

6 checks

1 red flag

Fits Me

How well does this role fit you?

Answer a few questions or drop your CV, and every role gets a fit score with the reasons, this one first.

  • Your field
  • Level
  • Stack
  • Work model
  • Salary floor
  • Must-haves
Details11 facts · Role, Location, Compensation, Employment, Company
Seniority
Senior
Type
Full-time
Industry
FinTech
Specialty
Security
Region
Europe
Pay period
Annual
Show 5 more factsShow less

Role

Category
DevOps & Infrastructure
Specialty
Security
Seniority
Senior
Experience
5+ years

Location

Work model
Office
Region
Europe
Office
  • Denmark

Compensation

Salary
Salary by agreement
Pay period
Annual

Employment

Type
Full-time

Company

Industry
FinTech

Something wrong with this vacancy?

Similar vacancies

Share this vacancy

What's wrong with it?

The employer never sees who reported.

Reason