SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Y TREE is a rapidly growing WealthTech business founded in 2017 that is redefining how individuals and families connect with their money. The company combines sophisticated portfolio analytics, behavioral psychology, and cutting-edge UX/UI to deliver transformational financial outcomes. Backed by leading European investors, Y TREE is scaling its technology platform and seeking a Senior Cyber Security Analyst to strengthen its security posture.
Reporting to the CTO, you will be a hands-on security leader embedded within the Technology team, working across multiple disciplines to establish and maintain robust cyber controls. This is a high-impact role with direct influence on the company's security strategy and regulatory compliance.
Key Responsibilities:
- Act as the primary security analyst, collaborating with technology teams to continuously improve Y TREE's security posture
- Serve as the escalation point for the externally-managed SOC; triage, prioritize, and lead incident response efforts
- Conduct security scanning and vulnerability management using tools like CrowdStrike and Trivy across AWS-hosted applications and infrastructure
- Manage security monitoring and alerts to identify attack vectors and implement mitigations
- Leverage automation and LLMs to streamline security operations tasks
- Introduce and embed security testing tools, including SAST, DAST, and SCA testing in CI/CD pipelines
- Maintain a security risk register and work with Technology, Risk, and Compliance teams to track and remediate issues
- Support cyber security certifications, accreditations, and policy maintenance
- Champion security awareness and best practices across the organization
- Collaborate with external security consultants on audits and assessments
The role is hybrid, requiring 2 days per week in the London office, with flexibility for remote work.
Requirements:
- Proven experience with security frameworks (CIS, NIST, ISO) and demonstrated track record applying security controls in FCA-regulated environments
- Understanding of key regulatory guidelines including GDPR and DORA
- Experience with intrusion detection, prevention, and SIEM systems
- Hands-on vulnerability management experience on cloud systems and applications, ideally AWS and Kubernetes
- Experience leading incident response and familiarity with penetration testing of applications and infrastructure
- Knowledge of OWASP principles, web application security, and security practices for native mobile apps (iOS and Android)
- Familiarity with project management tools (Confluence, Jira, ServiceNow)
- Understanding of emerging threat landscapes and risks from new technologies like AI
- Excellent written and verbal English communication skills
- Strong organizational, analytical, and collaborative mindset with ability to think critically and solve problems independently
- Bonus: prior experience in Fintech or WealthTech domains
