Staff Cyber Resilience Engineer

About the role

Xometry (NASDAQ: XMTR) is seeking a Staff Cyber Resilience Engineer to lead the company's defense against critical cyber threats, particularly ransomware, destructive wipes, and data loss at scale. This role requires hands-on technical leadership in designing and engineering an Isolated Recovery Environment, setting standards for Infrastructure as Code, and ensuring rapid and certain recovery in case of AWS environment compromise.

Responsibilities

• Own the design and engineering of the Isolated Recovery Environment, a hardened AWS account with immutable vaults designed to disrupt attackers' kill chains.
• Threat model the environment using a deep understanding of cloud-native attack patterns, such as IAM privilege escalation, backup deletion, ransomware persistence, and lateral movement across accounts.
• Validate and continuously improve backup configurations to ensure recoverability, not just existence.
• Lead the transition to 100% Infrastructure as Code, ensuring every asset (VPCs, IAM roles, security groups) is defined in Terraform for redeployment through automated pipelines.
• Build automated recovery workflows that can tear down a compromised environment and bootstrap a fresh, hardened one from verified code and clean data.
• Write and maintain executable recovery playbooks detailing exact API calls and CLI commands for restoring applications, tested, versioned, and runnable, not static documents.
• Develop and lead automated scripts to smoke test recovered data and validate its integrity post-restoration.
• Lead regular hands-on recovery drills simulating total loss of a critical environment and full recovery into a secondary clean account.
• Own the after-action process and drive improvements in resilience architecture.
• Act as the resilience authority for the engineering organization, shaping high-availability architecture decisions, influencing design reviews, and raising the floor on how we think about recoverability.
• Partner with the Site Reliability Engineering team on multi-region deployments and high-availability design, ensuring cyber resilience is embedded in architecture from the start.
• Champion IaC and immutable infrastructure practices across teams, not just within your own workstream.

Requirements

• 8+ years of experience in complex cloud environments, with at least 3 years in AWS.
• Hands-on familiarity with the Secure Vault pattern and advanced shell scripting.
• Experience with CI/CD tooling (Scalr, GitHub Actions, or equivalent).
• Proven ability to engineer and automate end-to-end restoration workflows.

Preferred

• Hands-on experience leading technical recovery efforts from an actual cyber attack or destructive incident.
• Experience with chaos engineering tooling to stress-test recovery assumptions.
• Familiarity with NIST SP 800-34 (Contingency Planning) or similar frameworks.
• AWS Security Specialty certification or equivalent demonstrated expertise.

Benefits

The estimated base salary range for new hires into this role is $205,000- $233,000 annually + annual bonus. Xometry offers a competitive benefits package, including 401(k) match, medical, dental, and vision insurance; life and disability insurance; generous paid time off; EAP, other wellbeing resources; and much more. Xometry is an equal opportunity employer.