CLOUD SECURITY ENGINEER

Reply, Inc.; Greater London; Hybrid; GBP 75,000 - 115,000; Full time

Job summary

Reply is seeking a hands-on Cloud Security Engineer to join our cybersecurity practice, embedding with engineering teams to design and secure AWS-based cloud architectures and integrate security into delivery pipelines.

You will work on threat modelling, cloud posture reviews, and secure by design implementations across client engagements in finance and public sector.

Qualifications

• Hands-on experience engineering and securing workloads on AWS.
• Practical experience with Terraform and IaC-based delivery.
• Background in DevSecOps or secure software engineering.
• Exposure to cloud security posture management and cloud-native security tooling.

Responsibilities

• Design and implement cloud security architectures on AWS (primary), with Azure/GCP exposure advantageous.
• Build and maintain secure infrastructure using Terraform and reusable modules.
• Integrate security tooling and automated controls into CI/CD pipelines.
• Conduct threat modelling, cloud security posture reviews, and risk assessments.
• Contribute security requirements to sprint cycles and platform roadmaps.
• Provide security assurance for deployments, third-party integrations, and SaaS onboarding.
• Support incident response planning and cloud resilience designs.
• Communicate risks and remediation priorities to technical peers and leads.

Skills

Cloud security engineering

AWS specialization

Threat modelling

Security in CI/CD

Education

Bachelor's degree in Cyber Security or Computer Science

Tools

Terraform

IaC

SAST/DAST tooling

CI/CD tooling

VPN/IPSEC networking

Job description

Requisition ID11408-Posted08/18/2026- Years of Experience (2) -Technology- Where (1)

Reply specialises in designing and implementing solutions based on new communication channels and digital media. Structured as a network of highly specialised companies, Reply supports leading European industrial groups in sectors such as Telco & Media, Industry and Services, Banking and Insurance, and Public Administration, helping define and develop business models enabled by new paradigms such as AI, Cloud Computing, Digital Media, and the Internet of Things. Reply’s services include Consulting, System Integration, and Digital Services.

Role Overview:

We are looking for a hands-onCloud Security Engineer to join our growing cybersecurity practice. This is an engineering-first role so we are looking for someone who builds, configures, and secures cloud infrastructure day-to-day, not just someone who writes policies and presents to stakeholders.

You will be embedded within financial services and public sector client engagements, working directly alongside engineering and platform teams to design and implement secure cloud architectures, integrate security into delivery pipelines, and improve cloud security posture across primarilyAWS-based environments. You will bring a strong cloud engineering background with a solid, practical understanding of security and a genuine desire to shift security left across the full delivery lifecycle.

Responsibilities:

• Design and implement cloud security architectures onAWS (primary), with exposure to Azure and/or GCP being advantageous
• Build and maintain secure infrastructure usingInfrastructure as Code (Terraform), including reusable, security-hardened modules and reference patterns
• Integrate security tooling and automated controls intoCI/CD pipelines, including SAST/DAST tooling, secrets scanning, and policy-as-code enforcement
• Conduct threat modelling exercises, cloud security posture reviews, and risk assessments for cloud platforms and workloads
• Work within scaled agile delivery teams, contributing security requirements and controls to sprint cycles and platform roadmaps
• Provide technical security assurance for application deployments, third‑party integrations, and SaaS product onboarding
• Support incident response planning and contribute to cloud resilience and recovery design for client-hosted services
• Communicate security risks and remediation priorities clearly to technical peers and, where needed, to technical leads and delivery managers

About the candidate:

• A minimum Bachelor's degree (2.1 or above) in Cyber Security, Computer Science, Software Engineering, or a related technical discipline
• Demonstrable, hands‑on experience engineering and securing workloads onAWS.
• Practical experience withTerraform and IaC-based delivery in a real engineering context
• Background inDevSecOps, secure software engineering, or application security, with direct experience integrating security into CI/CD pipelines
• Exposure to cloud security posture management, workload protection, or equivalent cloud‑native security tooling
• Familiarity with network security fundamentals including TCP/IP, DNS, VPN, and IPSEC
• Familiarity working withinfinancial services and/orpublic sector environments is advantageous
• Familiarity operating within agile delivery frameworks (Scrum, SAFe, or equivalent)

Reply is an Equal Opportunities Employer and committed to embracing diversity in the workplace. We provide equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type regardless of age, sexual orientation, gender, identity, pregnancy, religion, nationality, ethnic origin, disability, medical history, skin colour, marital status or parental status or any other characteristic protected by the Law.

Reply is committed to making sure that our selection methods are fair to everyone. To help you during the recruitment process, please let us know of any reasonable adjustmentsyou may need.