Senior Cyber Security Analyst

We are a rapidly growing Wealth Tech business that is re-defining how individuals and families connect and engage with their money. We provide our clients with control over their personal finances, enhancing their ability to achieve their financial and life aspirations.

We are harnessing sophisticated portfolio analytics, innovative behavioural psychology and cutting-edge UX/UI to create a revolutionary experience and transformational outcomes for our users. The business was founded in 2017 by three successful entrepreneurs and business-builders with diverse experiences and skill-sets in Technology, Corporate Advice and Investment Management, and is backed by some of Europe’s leading investors

We are a rapidly growing Wealth Tech business that is re-defining how individuals and families connect and engage with their money. We provide our clients with control over their personal finances, enhancing their ability to achieve their financial and life aspirations. We are harnessing sophisticated portfolio analytics, innovative behavioural psychology and cutting-edge UX/UI to create a revolutionary experience and transformational outcomes for our users.

The business was founded in 2017 by three successful entrepreneurs and business-builders with diverse experiences and skill-sets in Technology, Corporate Advice and Investment Management and is backed by some of Europe’s leading investors.

The role will be part of the Technology team and will report into the CTO. This role will work closely with multiple Technology disciplines and other internal and external teams to establish a strong set of cyber controls for the Y TREE business.

This is a hands-on role with a wide range of responsibilities including monitoring, detection, response and remediation of security risks, threats and vulnerabilities. The ultimate goal is to holistically improve Y TREE’s security posture to meet the demands of its clients and its regulators. This is a great opportunity for the right individual to make their mark and support the growth of a scale-up organisation.

• Security Posture Improvement: Act as a hands-on Security Analyst, closely interacting with multiple technology disciplines to collectively improve the security posture of Y TREE’s technologies.

• SOC Collaboration & Incident Response: Collaborate with an externally-managed SOC; act as the escalation point for Y TREE, triage and prioritise issues, manage the issue lifecycle, and lead incident response.

• Vulnerability Management: Carry out security scanning; detect and manage vulnerabilities to resolution and reduce operational risks using commercial (Crowd Strike) and open-source technologies (Trivy) in AWS-hosted applications and infrastructure.

• Monitoring & Mitigations: Manage security monitoring and alerts to understand attack vectors and introduce mitigations.

• Automation & LLMs: Use tools and automation (including LLMs) to carry out common security operations tasks.

• Routine Security Testing: Introduce and embed tools to enhance Y TREE’s internal capabilities for routine security testing activities and monitor/enhance security on CI/CD pipelines (SAST, DAST and SCA testing).

• Risk & Remediation Tracking: Maintain a register of security risks and remediations; work closely with Technology, Risk, and Compliance teams to track and close issues.

• Certifications & Policies: Support Y TREE’s efforts in maintaining current cyber security certifications and achieving higher accreditations, while maintaining/enhancing policies, documentation, and reporting on cyber metrics.

• Advocacy & Awareness: Elevate cyber security awareness across the organisation and champion best practices.

• External Audits: Collaborate…