Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Senior Cyber Security Analyst role.

Rezi rewrites your resume against Y Tree Limited's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Senior Cyber Security Analyst posting at Y Tree Limited — free, in seconds.

About the Role

This hands-on role involves monitoring, detection, response, and remediation of security risks, threats, and vulnerabilities to holistically improve Y TREE's security posture and meet client and regulatory demands. It's an opportunity to make a significant impact and support the growth of a scale-up organization.

Responsibilities

Act as a hands-on Security Analyst, closely interacting with multiple technology disciplines to collectively improve the security posture of Y TREE’s technologies.
Collaborate with an externally-managed SOC; act as the escalation point for Y TREE, triage and prioritize issues, manage the issue lifecycle, and lead incident response.
Carry out security scanning; detect and manage vulnerabilities to resolution and reduce operational risks using commercial (CrowdStrike) and open-source technologies (Trivy) in AWS-hosted applications and infrastructure.
Manage security monitoring and alerts to understand attack vectors and introduce mitigations.
Use tools and automation (including LLMs) to carry out common security operations tasks.
Introduce and embed tools to enhance Y TREE’s internal capabilities for routine security testing activities, and monitor/enhance security on CI/CD pipelines (SAST, DAST and SCA testing).
Maintain a register of security risks and remediations; work closely with Technology, Risk, and Compliance teams to track and close issues.
Support Y TREE’s efforts in maintaining current cyber security certifications and achieving higher accreditations, while maintaining/enhancing policies, documentation, and reporting on cyber metrics.
Elevate cyber security awareness across the organisation and champion best practices.
Collaborate with external cyber security consultants for external reviews, audits and assessments.

Requirements

Experience with security-focused frameworks (e.g., CIS, NIST, ISO).
Track record of applying security controls in an FCA-regulated environment.
Understanding of key regulatory guidelines (e.g., GDPR, DORA).
Experience with intrusion detection, prevention, and management (e.g., SIEM).
Experience with vulnerability management on cloud systems and applications (ideally AWS and Kubernetes).
Experience leading incident response and management.
Familiarity in pen testing of applications and infrastructure.
Familiarity with OWASP principles, web application security, security practices on native mobile apps (iOS and Android), and security-by-design principles.
Familiarity with project management tools (Confluence, Jira, ServiceNow).
Good understanding of the threat landscape and risks from emerging technologies (like AI).
Comfortable taking the lead when required.
Eager to learn and passionate about technology with a drive for continuous professional development.
Organized, meticulous, independent, and critical thinker.
Effective collaborator, open to feedback, and capable of identifying issues and building logical steps to overcome them.
Excellent written and verbal English skills, able to clearly articulate thoughts and ideas during interpersonal communication within our community.

Skills

Cyber security
Security controls
Monitoring
Detection
Response
Remediation
Security posture improvement
SOC collaboration
Incident response
Vulnerability management
Security scanning
AWS
Kubernetes
CrowdStrike
Trivy
Automation
LLMs
CI/CD pipeline security
SAST
DAST
SCA testing
Risk management
Compliance
Cyber security certifications
Policy development
Reporting
Cyber metrics
Security awareness
External audits
Security frameworks (CIS, NIST, ISO)
FCA regulation
GDPR
DORA
Intrusion detection
Intrusion prevention
SIEM
Penetration testing
OWASP principles
Web application security
Mobile app security (iOS, Android)
Security-by-design
Project management tools (Confluence, Jira, ServiceNow)
Threat landscape analysis
AI risks
Leadership
Continuous professional development
Critical thinking
Collaboration
Communication

Location

London

Work Type

Hybrid

Experience Level

Mid-level

Benefits

Private healthcare plan through Vitality
50% off premium gym memberships
Exclusive rewards programme
Employee assistance programme for mental health support
25 days of annual leave per year
3% employer pension contribution
Generous additional employer contributions via salary sacrifice
Welcoming, dog-friendly London office
Breakout spaces and silent booths
Regular team socials
Family-friendly policies
Support towards professional qualifications
Electric car schemes

About the Company

Y TREE is a rapidly growing WealthTech business redefining how individuals and families connect and engage with their money.
The company provides clients with control over their personal finances to help them achieve their financial and life aspirations.
Y TREE utilizes sophisticated portfolio analytics, innovative behavioral psychology, and cutting-edge UX/UI to create a revolutionary user experience.
Founded in 2017 by entrepreneurs with expertise in Technology, Corporate Advice, and Investment Management.
Backed by leading European investors.

Equal Opportunity

Y TREE's mission is to build diversity in its teams, including diversity of thought, culture, backgrounds, and perspectives.
Candidates are encouraged to apply as they are.
Reasonable adjustments can be made to support the application process.
Applications are welcome even if 100% of requirements are not met, provided suitability can be demonstrated.
Sponsorship is not available for this role.