Senior Cyber Security Analyst - WealthTech Cloud & IR

Y TREE; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Health & wellbeing

25 days leave

Pension contribution

Dog-friendly office

Professional qualifications support

Job summary

Y TREE is seeking a hands-on Security Analyst to strengthen cyber controls across our WealthTech platforms. You will collaborate with the Technology team to detect, respond to and remediate threats, manage vulnerabilities in AWS/Kubernetes, and improve our security posture for clients and regulators.

The role emphasizes incident response leadership, CI/CD security testing and ongoing security automation. Hybrid London-based work with 2 office days per week is offered.

Qualifications

• Experience applying security controls in FCA-regulated environments (GDPR, DORA).
• Strong intrusion detection, prevention and management across cloud systems (AWS, Kubernetes).
• Proven incident response leadership and application/infrastructure pentesting exposure.
• Knowledge of OWASP, web/mobile security, and security-by-design principles.
• Familiarity with Confluence, Jira, ServiceNow and broad threat landscape understanding (AI-focused risks).
• Demonstrated leadership, growth mindset, and collaborative problem-solving.
• Excellent written and spoken English.

Responsibilities

• Improve security posture across Y TREE technologies through hands-on security analysis.
• Lead incident response and coordinate with an externally-managed SOC.
• Manage vulnerability identification and remediation in AWS-hosted environments.
• Oversee monitoring, alerts, and mitigations for attack vectors.
• Automate routine security operations, including use of LLMs.
• Oversee SAST/DAST/SA testing on CI/CD pipelines.
• Track risks and remediations with cross-functional teams.
• Support certifications and policy development; report cyber metrics.
• Promote cyber security awareness across the organization.
• Coordinate external audits and reviews with consultants.

Skills

Security frameworks

Threat detection

Incident response

Application security

Tooling & threat landscape

Leadership

Collaboration

Communication

Tools

Confluence

Jira

ServiceNow

AWS

Kubernetes

SIEM

CrowdStrike

Trivy

Job description

Y TREE is seeking a hands-on Security Analyst to strengthen cyber controls across our WealthTech platforms. You will collaborate with the Technology team to detect, respond to and remediate threats, manage vulnerabilities in AWS/Kubernetes, and improve our security posture for clients and regulators.

The role emphasizes incident response leadership, CI/CD security testing and ongoing security automation. Hybrid London-based work with 2 office days per week is offered.