Staff Cyber Resilience Engineer

The role

You will lead the design and build of Xometry's isolated recovery environment for AWS, so the company can restore operations after ransomware or destructive attacks. You will lead Infrastructure as Code standards across the organization and run recovery drills that test the whole company.

What you will do

• Design and build the Isolated Recovery Environment, a hardened AWS account with immutable vaults
• Threat model the cloud environment against attacks such as privilege escalation, backup deletion and ransomware persistence
• Validate and improve backup configurations so data can actually be recovered
• Lead the move to 100% Infrastructure as Code using Terraform
• Build automated workflows to tear down a compromised environment and rebuild a clean one
• Write and maintain tested, runnable recovery playbooks
• Develop Python or Go scripts to test and validate restored data
• Lead recovery drills and own the after-action process
• Act as the resilience authority for engineering design reviews
• Partner with the Site Reliability Engineering team on multi-region and high-availability design

Required qualifications

• 8+ years of experience in complex cloud environments (AWS, GCP or Azure)
• At least 3 years of experience in AWS
• Strong Terraform skills, including modularizing environment-agnostic code
• Familiarity with the Secure Vault pattern in a separate, restricted AWS account
• Advanced shell scripting and proficiency in Python or Go
• Experience with CI/CD tooling such as Scalr, GitHub Actions or equivalent
• Proven ability to engineer and automate end-to-end restoration workflows

Nice to have

• EKS or Kubernetes experience
• Experience leading technical recovery from a real cyber attack or destructive incident
• Experience with chaos engineering tools
• Familiarity with NIST SP 800-34 or similar contingency planning frameworks
• AWS Security Specialty certification or equivalent demonstrated expertise

Benefits

• 401(k) match
• Medical, dental and vision insurance
• Life and disability insurance
• Generous paid time off, including vacation and sick leave
• Floating and fixed holidays
• Maternity and bonding leave
• Employee assistance program (EAP) and other wellbeing resources

Before you apply

• For US-based roles, the company participates in E-Verify and will verify work authorization with Form I-9 after an offer is accepted

About the company

Xometry (NASDAQ: XMTR) runs a digital marketplace that connects manufacturers with buyers, including Fortune 1000 companies. It describes itself as powering the industries of today and tomorrow.