Staff Cyber Resilience Engineer

The role

You will design and build an isolated recovery environment in AWS that protects data from ransomware and destructive attacks. You will lead Infrastructure as Code standards, recovery playbooks and recovery drills across the engineering organization.

What you will do

• Design and build the Isolated Recovery Environment, a hardened AWS account with immutable vaults
• Threat model the cloud environment against IAM escalation, backup deletion, ransomware persistence and lateral movement
• Validate and improve backup configurations so data can be recovered
• Lead the move to 100% Infrastructure as Code using Terraform
• Build automated workflows to tear down a compromised environment and rebuild a clean one
• Write and maintain tested, versioned recovery playbooks
• Develop Python or Go scripts to smoke test and validate restored data
• Lead recovery drills and own the after-action process
• Act as the resilience authority for high-availability and architecture decisions
• Partner with the Site Reliability Engineering team on multi-region deployments

Required qualifications

• 8+ years of experience in complex cloud environments (AWS, GCP or Azure)
• At least 3 years of experience in AWS
• Strong Terraform skills, including modularizing environment-agnostic code
• Hands-on familiarity with the Secure Vault pattern in a separate restricted AWS account
• Advanced shell scripting and proficiency in Python or Go
• Experience with CI/CD tooling such as Scalr, GitHub Actions or equivalent
• Proven ability to engineer and automate end-to-end restoration workflows

Nice to have

• Experience with EKS or Kubernetes
• Experience leading technical recovery from a real cyber attack or destructive incident
• Experience with chaos engineering tooling
• Familiarity with NIST SP 800-34 or similar frameworks
• AWS Security Specialty certification or equivalent demonstrated expertise

Benefits

• 401(k) match
• Medical, dental and vision insurance
• Life and disability insurance
• Generous paid time off, including vacation, sick leave, floating and fixed holidays
• Maternity and bonding leave
• EAP and other wellbeing resources
• A competitive benefits package with more offered

Before you apply

• Xometry participates in E-Verify for US-based roles and requires Form I-9 information after an offer is accepted to confirm work authorization

About the company

Xometry (NASDAQ: XMTR) runs a digital marketplace that connects people with ideas to manufacturers. Its platform gives manufacturers resources to grow and gives Fortune 1000 buyers access to global manufacturing capacity.