Senior Cyber Security Analyst - Cloud & Incident Response

MMC; Greater London; Hybrid; GBP 75,000 - 120,000; Full time

Benefits offered by this job

Health & Wellbeing

True Time Off

Financial Future

Environment

Extra Perks

Job summary

Y TREE is seeking a security-focused analyst to join the Technology team in London. You will monitor, detect, respond to threats, and remediate vulnerabilities while coordinating with an externally managed SOC. The role emphasizes improving security posture across AWS-hosted apps and CI/CD pipelines.

Responsibilities include vulnerability management, automation, and collaboration with Risk and Compliance, aiming to achieve higher cyber certifications. Hybrid London office, 2 days on-site.

Qualifications

• Experience applying security controls in FCA-regulated environments.
• ],
• job_responsibilities_description':[
• CoT_job_summary_short

Responsibilities

• Security posture improvement through hands-on analysis with multiple tech teams.
• Coordinate with an externally managed SOC and lead incident response.
• Run vulnerability management using CrowdStrike and Trivy in AWS.
• Monitor security and implement mitigations in CI/CD pipelines (SAST/DAST/SCA)
• Automate security tasks and leverage LLMs for operations
• Maintain risk/remediation tracker with Tech, Risk and Compliance teams
• Support certifications and policy reporting, improving cyber metrics
• Champion security awareness across the organization
• Collaborate with external security consultants for audits

Skills

Security awareness

Threat detection

Incident response

Cloud security

Leadership

Communication skills

Education

Cyber security/IT degree

Tools

SIEM

CrowdStrike

Trivy

AWS

Kubernetes

Confluence

Jira

ServiceNow

Job description

Y TREE is seeking a security-focused analyst to join the Technology team in London. You will monitor, detect, respond to threats, and remediate vulnerabilities while coordinating with an externally managed SOC. The role emphasizes improving security posture across AWS-hosted apps and CI/CD pipelines.

Responsibilities include vulnerability management, automation, and collaboration with Risk and Compliance, aiming to achieve higher cyber certifications. Hybrid London office, 2 days on-site.