Staff Cyber Resilience Engineer

About the role

The Staff Cyber Resilience Engineer leads the defense against critical cyber threats, focusing on ransomware, destructive wipes, and data loss at scale. The role involves designing and engineering the Isolated Recovery Environment, setting standards for Infrastructure as Code, and ensuring rapid and certain recovery in case of AWS environment compromise.

Responsibilities

• Own the design and engineering of the Isolated Recovery Environment, a hardened AWS account with immutable vaults to prevent attackers from reaching data.
• Threat model the environment with a deep understanding of cloud-native attack patterns, and validate and continuously improve backup configurations.
• Lead the transition to 100% Infrastructure as Code, ensuring every asset is defined in Terraform for automated deployment.
• Build automated recovery workflows to tear down compromised environments and bootstrap fresh, hardened ones from verified code and clean data.
• Write and maintain executable recovery playbooks detailing exact API calls and CLI commands for restoring applications.
• Develop automated scripts to smoke test recovered data and validate its integrity post-restoration.
• Lead regular hands-on recovery drills simulating total loss of critical environments and full recovery into secondary clean accounts.
• Act as the resilience authority for the engineering organization, shaping high-availability architecture decisions, and championing IaC and immutable infrastructure practices.
• Partner with the Site Reliability Engineering team on multi-region deployments and high-availability design, ensuring cyber resilience is embedded from the start.

Requirements

• 8+ years of experience in complex cloud environments, including at least 3 years in AWS. EKS/Kubernetes experience is a strong plus.
• Strong Terraform skills, capable of modularizing complex environments.
• Hands-on familiarity with the Secure Vault pattern and advanced shell scripting.
• Experience with CI/CD tooling and automation of end-to-end restoration workflows.

Preferred

• Hands-on experience leading technical recovery efforts from actual cyber attacks or destructive incidents.
• Experience with chaos engineering tooling to stress-test recovery assumptions.
• Familiarity with NIST SP 800-34 or similar frameworks.
• AWS Security Specialty certification or equivalent demonstrated expertise.

Benefits

The estimated base salary range for new hires into this role is $205,000- $233,000 annually + annual bonus, depending on factors such as job-related skills, relevant experience, and location. We also offer a competitive benefits package, including 401(k) match, medical, dental, and vision insurance; life and disability insurance; generous paid time off; EAP, other wellbeing resources; and much more.