Staff Cyber Resilience Engineer

About the Role

Xometry is looking for a Staff Cyber Resilience Engineer to lead our defense against ransomware, destructive wipes, and data loss at scale. In this hands-on technical leadership role, you will own the design and engineering of our Isolated Recovery Environment, set the standard for Infrastructure as Code across the organization, and ensure operational recoverability in AWS.

Responsibilities

Own Our Recovery Architecture

• Design and build an Isolated Recovery Environment (hardened AWS account with immutable vaults) to disrupt kill chains before data impact.
• Threat model the environment focusing on cloud-native attack patterns (IAM privilege escalation, backup deletion, ransomware persistence, lateral movement).
• Validate and continuously improve backup configurations for verified recoverability.

Standardize and Automate Infrastructure

• Lead the transition to 100% Infrastructure as Code using Terraform (VPCs, IAM roles, security groups) for complete stack redeployments.
• Build automated recovery workflows to tear down compromised environments and bootstrap fresh, hardened accounts.
• Author and maintain executable, version-controlled recovery playbooks with exact API calls and CLI commands.

Validate, Test, and Lead Exercises

• Develop automated test scripts in Python or Go to smoke test recovered data and validate post-restoration integrity.
• Lead regular hands-on recovery drills simulating total environment loss and secondary clean account recovery, driving after-action improvements.

Drive Engineering Standards

• Serve as the resilience authority across the engineering organization, influencing high-availability architecture and design reviews.
• Partner with Site Reliability Engineering on multi-region deployments and high-availability design.
• Champion IaC and immutable infrastructure practices across teams.

Qualifications

Required

• 8+ years of experience in complex cloud environments (AWS/GCP/Azure), including at least 3 years in AWS.
• Strong Terraform skills with experience modularizing environments to be environment-agnostic.
• Hands-on familiarity with the Secure Vault pattern in isolated, restricted AWS accounts.
• Advanced shell scripting and proficiency in either Python or Go for automated restoration workflows.
• Experience with CI/CD tooling (Scalr, GitHub Actions, or equivalent).
• Proven ability to engineer and automate end-to-end restoration workflows.

Preferred

• Hands-on experience leading technical recovery efforts from a real cyber attack or destructive incident.
• Experience with EKS / Kubernetes.
• Experience with chaos engineering tooling.
• Familiarity with NIST SP 800-34 or similar contingency planning frameworks.
• AWS Certified Security - Specialty certification or equivalent expertise.