Staff Cyber Resilience Engineer

Xometry (NASDAQ: XMTR) powers the industries of today and tomorrow by connecting the people with big ideas to the manufacturers who can bring them to life. Xometry’s digital marketplace gives manufacturers the critical resources they need to grow their business while also making it easy for buyers at Fortune 1000 companies to tap into global manufacturing capacity. We’re looking for a Staff Cyber Resilience Engineer to lead our defense against the attacks that matter most: ransomware, destructive wipes, and data loss at scale. This is a hands-on technical leadership role. You will own the design and engineering of our Isolated Recovery Environment, set the standard for Infrastructure as Code across the organization, and ensure that if our AWS environment is ever compromised, we can restore operations with certainty and speed. You will work with a high-caliber engineering team, have direct influence on our security architecture, and lead recovery exercises that test the organization end-to-end.

Responsibilities

Own the design and engineering of the Isolated Recovery Environment; Set the standard for Infrastructure as Code across the organization; Ensure that if AWS environment is compromised, restore operations with certainty and speed; Lead recovery exercises that test the organization end-to-end; Threat model environment with cloud-native attack patterns; Validate and continuously improve backup configurations for recoverability; Lead transition to 100% Infrastructure as Code; Build automated recovery workflows; Write and maintain executable recovery playbooks; Develop automated scripts to smoke test recovered data; Lead regular hands-on recovery drills; Act as resilience authority for engineering organization; Partner with Site Reliability Engineering team on multi-region deployments and high-availability design; Champion IaC and immutable infrastructure practices across teams

Requirements

8+ years of experience in complex cloud environments (any of AWS/GCP/Azure), including at least 3 years in AWS; Strong Terraform skills; Hands-on familiarity with the Secure Vault pattern; Advanced shell scripting and proficiency in either Python or Go; Experience with CI/CD tooling (Scalr, GitHub Actions, or equivalent); Proven ability to engineer and automate end-to-end restoration workflows

Nice to have

EKS/Kubernetes experience; Hands-on experience leading technical recovery efforts from an actual cyber attack or destructive incident; Experience with chaos engineering tooling to stress-test recovery assumptions; Familiarity with NIST SP 800-34 (Contingency Planning) or similar frameworks; AWS Security Specialty certification or equivalent demonstrated expertise

Benefits

bonus; 401(k) match; medical, dental and vision insurance; life and disability insurance; generous paid time off including vacation, sick leave, floating and fixed holidays, maternity and bonding leave; EAP, other wellbeing resources