Staff Cyber Resilience Engineer

About the role

The Staff Cyber Resilience Engineer will lead the development and implementation of the Isolated Recovery Environment, ensuring the organization's data and systems remain resilient against advanced threats. This role requires a deep understanding of cloud-native attack patterns and the ability to design and automate infrastructure to support rapid recovery.

Responsibilities

• Own the design and engineering of the Isolated Recovery Environment, a hardened AWS account with immutable vaults designed to prevent attackers from reaching sensitive data.
• Threat model the environment with a focus on common cloud-native attack vectors such as IAM privilege escalation, backup deletion, ransomware persistence, and lateral movement.
• Develop and maintain automated recovery workflows that can quickly restore operations from a compromised state.
• Lead the transition to 100% Infrastructure as Code (IaC) across the organization, ensuring all assets are defined and managed through Terraform.
• Write and maintain executable recovery playbooks that detail the exact steps needed to restore applications, including API calls and CLI commands.
• Develop and execute automated scripts to test and validate the integrity of restored data.
• Organize and conduct regular hands-on recovery drills to test the organization's end-to-end recovery capabilities.
• Act as the resilience authority for the engineering organization, shaping high-availability architecture decisions and driving best practices for recoverability.
• Partner with the Site Reliability Engineering team on multi-region deployments and high-availability design, ensuring cyber resilience is integrated into the architecture from the outset.
• Promote IaC and immutable infrastructure practices across teams, fostering a culture of resilience and automation.

Requirements

• 8+ years of experience in complex cloud environments, with at least 3 years in AWS.
• Strong Terraform skills, including the ability to modularize complex environments.
• Hands-on experience with the Secure Vault pattern, including the protection of data in a separate, highly restricted AWS account with tight network controls.
• Advanced shell scripting and proficiency in either Python or Go for automating restoration tasks.
• Experience with CI/CD tooling, such as Scalr or GitHub Actions, to enable broad adoption of recovery pipelines.
• Proven ability to engineer and automate end-to-end restoration workflows.

Preferred

• Hands-on experience leading technical recovery efforts from an actual cyber attack or destructive incident.
• Experience with chaos engineering tooling to stress-test recovery assumptions.
• Familiarity with NIST SP 800-34 (Contingency Planning) or similar frameworks.
• AWS Security Specialty certification or equivalent demonstrated expertise.

Benefits

At Xometry, we offer a competitive benefits package, including a 401(k) match, medical, dental, and vision insurance, life and disability insurance, generous paid time off, and comprehensive wellness resources.