{"id":2522402,"url":"https://alion.io/job/y-tree-senior-cyber-security-analyst","title":"Senior Cyber Security Analyst","company":{"id":3780532,"name":"Y TREE","domain":"y-tree.com","url":"https://alion.io/company/y-tree","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":86000,"max_usd":158000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":32},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Confluence","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GDPR","optional":false},{"name":"Jira","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false},{"name":"Trivy","optional":false}],"status":"live","first_seen_at":"2026-10-06T12:35:19Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-10-15T01:44:17Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"About Y TREE\nWe are a rapidly growing WealthTech business that is re-defining how individuals and families connect and engage with their money.We provide our clients with control over their personal finances, enhancing their ability to achieve their financial and life aspirations.We are harnessing sophisticated portfolio analytics, innovative behavioural psychology and cutting-edge UX/UI to create a revolutionary experience and transformational outcomes for our users.The business was founded in 2017 by three successful entrepreneurs and business-builders with diverse experiences and skill-sets in Technology, Corporate Advice and Investment Management and is backed by some of Europe’s leading investors.\nTeam Overview & The Role\nThe role will be part of the Technology team and will report into the CTO.This role will work closely with multiple Technology disciplines and other internal and external teams to establish a strong set of cyber controls for the Y TREE business.\nThis is a hands-on role with a wide range of responsibilities including monitoring, detection, response and remediation of security risks, threats and vulnerabilities.The ultimate goal is to holistically improve Y TREE’s security posture to meet the demands of its clients and its regulators.This is a great opportunity for the right individual to make their mark and support the growth of a scale-up organisation.\nCore Responsibilities\nSecurity Posture Improvement: Act as a hands-on Security Analyst, closely interacting with multiple technology disciplines to collectively improve the security posture of Y TREE’s technologies.\n\nSOC Collaboration & Incident Response: Collaborate with an externally-managed SOC; act as the escalation point for Y TREE, triage and prioritise issues, manage the issue lifecycle, and lead incident response.\n\nVulnerability Management: Carry out security scanning; detect and manage vulnerabilities to resolution and reduce operational risks using commercial (CrowdStrike) and open-source technologies (Trivy) in AWS-hosted applications and infrastructure.\n\nMonitoring & Mitigations: Manage security monitoring and alerts to understand attack vectors and introduce mitigations.\n\nAutomation & LLMs: Use tools and automation (including LLMs) to carry out common security operations tasks.\n\nRoutine Security Testing: Introduce and embed tools to enhance Y TREE’s internal capabilities for routine security testing activities, and monitor/enhance security on CI/CD pipelines (SAST, DAST and SCA testing).\n\nRisk & Remediation Tracking: Maintain a register of security risks and remediations; work closely with Technology, Risk, and Compliance teams to track and close issues.\n\nCertifications & Policies: Support Y TREE’s efforts in maintaining current cyber security certifications and achieving higher accreditations, while maintaining/enhancing policies, documentation, and reporting on cyber metrics.\n\nAdvocacy & Awareness: Elevate cyber security awareness across the organisation and champion best practices.\n\nExternal Audits: Collaborate with external cyber security consultants for external reviews, audits and assessments.\n\nWhat You Bring\nSecurity Frameworks & Regulation: Experience with security-focused frameworks (e.g., CIS, NIST, ISO) and a track record of applying security controls in an FCA-regulated environment, with an understanding of key regulatory guidelines (e.g., GDPR, DORA).\n\nThreat Detection & Cloud Security: Experience with intrusion detection, prevention, and management (e.g., SIEM) alongside vulnerability management on cloud systems and applications (ideally AWS and Kubernetes).\n\nIncident & Penetration Expertise: Experience leading incident response and management, with familiarity in pen testing of applications and infrastructure.\n\nApplication Security: Familiarity with OWASP principles, web application security, security practices on native mobile apps (iOS and Android), and security-by-design principles.\n\nTooling & Threat Landscape: Familiarity with project management tools (Confluence, Jira, ServiceNow) and a good understanding of the threat landscape and risks from emerging technologies (like AI).\n\nLeadership & Growth: Comfortable taking the lead when required, eager to learn, and passionate about technology with a drive for continuous professional development.\n\nMindset & Collaboration: An organised, meticulous, independent, and critical thinker who is an effective collaborator, open to feedback, and capable of identifying issues and building logical steps to overcome them.\n\nCommunication Skills: Excellent written and verbal English skills, able to clearly articulate thoughts and ideas during interpersonal communication within our community.\n\nBonus Points\nExperience working in a Fintech or WealthTech domain.\n\nLocation & Ways of Working\nHybrid Model: London-based with a hybrid working policy requiring 2 days per week in our London office.\n\nWhat We Offer (Benefits)\nHealth & Wellbeing: Private healthcare plan through Vitality (including 50% off premium gym memberships and an exclusive rewards programme) and support for your mental health through our employee assistance programme.\n\nTrue Time Off: 25 days of annual leave per year where we expect you to turn your phone off and switch off; we never ask you to book leave for a doctor's appointment or to see your children's school plays.\n\nFinancial Future: 3% employer pension contribution as standard, with generous additional employer contributions if you choose to make contributions via salary sacrifice.\n\nEnvironment: A welcoming, dog-friendly London office with appropriate spaces for varying needs, including breakout spaces and silent booths, alongside regular, well-balanced team socials.\n\nExtra Perks: A range of family-friendly policies, support towards professional qualifications, electric car schemes, and more!","description_format":"text","description_chars":5848,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Annual leave","Gym membership","Hybrid work","Professional development"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Financial Services","Wealth Management & Financial Advisors","Application Security"],"lifecycle":[{"event":"open","at":"2026-10-14T11:31:23Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker","cap_exempt":false,"checked_at":"2026-10-14T06:20:30+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":75,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.792,"p_room":0.945,"age_days":8,"expected_fill_days":23,"reasons":["conf:3","win:mid"],"computed_at":"2026-10-15T05:01:45Z"},"pay":null,"html_url":"https://alion.io/job/y-tree-senior-cyber-security-analyst","json_url":"https://alion.io/job/y-tree-senior-cyber-security-analyst.json","meta":{"generated_at":"2026-10-15T05:01:45Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7390,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3780532},"rest":"https://alion.io/mcp/rest/get_company?id=3780532"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fy-tree-senior-cyber-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fy-tree-senior-cyber-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fy-tree-senior-cyber-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/y-tree-senior-cyber-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fy-tree-senior-cyber-security-analyst"}]}