AWS Cloud Security Engineer

Reapit; Metropolitan Borough of Solihull; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Pension (5.5%)

20 days annual leave (+ birthday)

Christmas closure

In-house L&D training (Go1)

Health benefits (Gym Flex, flu shots)

Season ticket loan

Social events

Benni benefits

Go1 learning library

Job summary

Reapit is seeking a Cloud Security Engineer to strengthen our cloud security posture and lead incident response across global teams. Reporting to the CISO, you will design secure AWS infrastructure, perform vulnerability assessments, and drive security automation with IaC in a DevOps context.

You will collaborate with DevOps and engineering across time zones, respond to SOC alerts, and guide secure development practices while maintaining thorough documentation and post-incident reports.

Qualifications

• Minimum 3 years’ hands-on AWS cloud security or security engineering experience.
• Strong proficiency with AWS IAM, VPC, EC2, S3, RDS, Lambda.
• Extensive incident response experience including forensics, log analysis and threat detection.
• Experience with AWS security tooling: Security Hub, GuardDuty, Detective, CloudTrail, CloudWatch, Inspector.
• Scripting in Python and IaC with Terraform.
• Solid knowledge of ISO 27001 and NIST CSF.
• Familiar with open-source security testing tools (BurpSuite, ZAP, Nikto, Metasploit, SQLmap).
• Self-motivated, proactive, and able to own and drive tasks with minimal oversight.
• Excellent written and verbal communication across global teams.
• Willingness to participate in out-of-hours incident response.
• AWS Certified Security – Specialty.
• Experience in threat intelligence, cloud forensics or advanced SOC workflows.
• Experience in global or distributed security teams.

Responsibilities

• Design, implement and harden secure cloud infrastructure in collaboration with DevOps.
• Conduct security assessments of AWS environments and remediate findings.
• Develop security automation tooling and IaC processes.
• Lead end-to-end incident response, including containment and recovery.
• Monitor AWS/Azure security alerts and respond swiftly.
• Perform digital forensics and log analysis for threat validation.
• Document incident activity in tickets, runbooks and post-incident reports.
• Provide mentorship to development and operations teams.
• Collaborate across time zones on global security initiatives.

Skills

AWS security

Incident response

Python scripting

Terraform / IaC

AWS services

Security tooling

Open-source tools

Self-motivation

Communication

Out-of-hours readiness

AWS Security Specialty

Threat intelligence

Global team experience

Tools

Terraform

Python

AWS Security Services

Job description

Could you be our next Cloud Security Engineer ?

Reapit is the original end-to-end business technology provider for estate agencies of all sizes. We've been helping sales and lettings agents build relationships and grow their businesses for more than 25 years. Our technology empowers property professionals across Europe, the Middle East, Australia, and New Zealand to work with buyers, sellers, tenants, and landlords to deliver a dream home experience.

Worldwide, over 78,000 agents across more than 15,000 branches use Reapit to run their businesses, manage properties, collect rent, engage clients, and provide outstanding customer service every time.

What you’ll be doing

Reporting directly to the CISO, you’ll play a critical role in strengthening and maturing Reapit’s cloud security posture. Your work will span hands on security engineering, deep incident response, proactive threat detection, and collaboration with global teams.

Security Engineering & Cloud Security

Design, implement, and enhance secure Cloud infrastructure, services, and applications in collaboration with DevOps teams.

Conduct ongoing security assessments, configuration reviews, and audits of AWS environments to identify vulnerabilities and recommend remediation.

Implement and maintain cloud security controls aligned to ISO 27001, NIST and cloud security best practices.

Develop security automation tooling, scripts, and infrastructure as code processes to streamline security operations.

Take ownership of security engineering projects, delivering them end to end with strong attention to detail and high quality documentation.

Work in a self managing, proactive manner — anticipating security needs, identifying gaps, and driving improvements without close supervision.

Respond to SOC alerts for our outsourced SOC

Lead and participate in global incident response activities, including investigation, containment, eradication, and recovery.

Perform advanced log analysis, digital forensics, and threat validation using AWS native and third party tooling.

Monitor AWS/Azure and application security alerts, responding quickly and decisively.

Participate in an out of hours when required (Time in Lieu given), including early morning collaboration with Australia based teams and responding to major incidents.

Document all incident activity clearly and thoroughly in tickets, knowledge bases, and post incident reports.

Carryout threat models and review log ingestion and alerting with the SOC

Security Collaboration & Enablement

Provide expert guidance and mentorship to development, engineering and operations teams.

Collaborate across multiple time zones, contributing proactively and reliably to global security initiatives.

Stay ahead of emerging cloud threats, AWS security tooling, and defensive techniques, champion their adoption across the organisation.

Produce clear, detailed, and structured documentation for tickets, processes, runbooks, and security standards.

Who we're looking for

At Reapit, we prioritise hiring individuals who share our values and possess the right attitudes and behaviours for success. Whilst some of the listed requirements may be important, don’t worry if you don’t meet all of them, we’d still like to hear from you.

• Minimum 3 years’ hands on experience in cloud security or security engineering within an AWS focused DevOps environment.
• Strong technical proficiency across AWS services including IAM, VPC, EC2, S3, RDS, Lambda, and core networking concepts.
• Deep, practical experience in incident response, including digital forensics, log analysis, threat detection, and handling security incidents end to end.
• Experience with AWS security tooling such as Security Hub, GuardDuty, Detective, CloudTrail, CloudWatch, Inspector, and related cloud native controls.
• Practical experience with scripting (Python preferred) and Infrastructure as Code tooling such as Terraform.
• Solid understanding of ISO 27001, NIST CSF, and cloud security best practices.
• Familiarity with commonly used open-source security testing tools (e.g., BurpSuite, ZAP, Nikto, Metasploit, SQLmap).
• Highly self managing, able to take ownership of work, prioritise effectively, and drive tasks to completion with minimal oversight.
• Proactive in identifying security gaps, recommending improvements, and staying ahead of emerging threats.
• Strong attention to detail, especially in technical execution, documentation, and ticketing.
• Excellent communication skills, able to work with both technical and non-technical teams across multiple time zones.
• Comfortable participating in out of hours incident response when required.
• AWS Certified Security - Specialty
• Exposure to threat intelligence, cloud forensics, or advanced SOC workflows.
• Experience working in a global or distributed security team

What your impact and success looks like

As a Security Engineer we expect your success and impact in the early stages of your career with us to look something like this:

Within 1 month:

Familiarity with Company Policies and Security Infrastructure

Familiarity with AWS Security Best Practices and the business Setup

Within 3 months:

Security Incident Handling and Remediation

Security Automation and Tooling

Security Compliance and Auditing

Collaboration with Development Teams

Within 6 months:

Threat Modelling and Risk Assessment

Security Incident Management

What’s in it for you?

We operate a Flexible Working Policy and we would like for you to work from our London or Solihull office, 2 days a week. We’re offering the chance to really make a difference here at Reapit and the opportunity for personal growth is very real. You’ll feel part of a special team. You can expect a highly competitive salary and some great benefits, including:

• 5.5% employer pension contribution
• 20 days annual leave (plus a day for your birthday) increasing by a day for every year worked (capped at 24 days)
• Business permitting, We're closed over Christmas, to give you time back to your friends and family
• Formal and in-house training for your L&D plus access to Go1 - the world's largest online learning library
• Health benefits including Gym Flex, annual flu vaccinations and many others
• Season ticket loan
• Regular local and companywide social events including Tucker Thursday - mouth-watering cuisine delivered straight to the office doors once a month!
• Opportunity to participate in retail benefits and savings via our Benefits partner, Benni!

Don't tick all the boxes? Neither do we

We care about our industry and want it to become a more inclusive and diverse place to work. So, we’re driven by hiring not only by experience and relevance for the role but by sharing our values and the right attitudes and behaviours for success. We are committed to Equal Employment Opportunity through attracting and retaining a complementary team of employees and building an inclusive environment for all. We feel we have an empowering environment where everyone is supported and respected, and we want you to feel this too. We welcome new ideas, thinking and approaches, whilst listening to all our employees