Staff Cyber Resilience Engineer

About this role

<div class="content-intro"><p><span style="font-size: 10pt; font-family: arial, helvetica, sans-serif;">Xometry (NASDAQ: XMTR) powers the industries of today and tomorrow by connecting the people with big ideas to the manufacturers who can bring them to life. Xometry’s digital marketplace gives manufacturers the critical resources they need to grow their business while also making it easy for buyers at Fortune 1000 companies to tap into global manufacturing capacity.</span></p></div><p><span style="font-family: arial, helvetica, sans-serif; font-size: 10pt;">We’re looking for a&nbsp;<strong>Staff Cyber Resilience Engineer</strong> to lead our defense against the attacks that matter most: ransomware, destructive wipes, and data loss at scale. This is a hands-on technical leadership role.&nbsp; You will own the design and engineering of our Isolated Recovery Environment, set the standard for Infrastructure as Code across the organization, and ensure that if our AWS environment is ever compromised, we can restore operations with certainty and speed.</span></p> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 10pt;">You will work with a high-caliber engineering team, have direct influence on our security architecture, and lead recovery exercises that test the organization end-to-end.</span></p> <h2><span style="font-size: 10pt; font-family: arial, helvetica, sans-serif;"><strong>How You’ll Contribute:</strong></span></h2> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 10pt;"><strong>Own Our Recovery Architecture</strong></span></p> <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 10pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 10pt;">&nbsp; &nbsp; &nbsp; Design and build our Isolated Recovery Environment — a hardened AWS account with immutable vaults that break the attacker’s kill chain before it reaches our data</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 10pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 10pt;">&nbsp; &nbsp; &nbsp; Threat model our environment with a deep understanding of cloud-native attack patterns: IAM privilege escalation, backup deletion, ransomware persistence, and lateral movement across accounts</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 10pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 10pt;">&nbsp; &nbsp; &nbsp; Validate and continuously improve backup configurations to ensure recoverability, not just existence</span></li> </ul> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 10pt;"><strong>Standardize and Automate Infrastructure</strong></span></p> <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 10pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 10pt;">&nbsp; &nbsp; &nbsp; Lead our transition to 100% Infrastructure as Code. Every asset (VPCs, IAM roles, security groups) must be defined in Terraform so we can redeploy the entire stack into a clean account via automated pipeline</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 10pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 10pt;">&nbsp; &nbsp; &nbsp; Build automated recovery workflows that can tear down a compromised environment and bootstrap a fresh, hardened one from verified code and clean data</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 10pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 10pt;">&nbsp; &nbsp; &nbsp; Write and maintain executable recovery playbooks that detail the exact API calls and CLI commands needed to restore the application — tested, versioned, and runnable, not static documents</span></li> </ul> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 10pt;"><strong>Validate, Test, and Lead Exercises</strong></span></p> <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 10pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 10pt;">&nbsp; &nbsp; &nbsp; Develop automated scripts (Python or Go) to smoke test recovered data and validate integrity post-restoration</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 10pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 10pt;">&nbsp; &nbsp; &nbsp; Lead regular hands-on recovery drills that simulate total loss of a critical environment and full recovery into a secondary clean account. Own the after-action process and drive improvements</span></li> </ul> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 10pt;"><strong>Drive Engineering Standards</strong></span></p> <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 10pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 10pt;">&nbsp; &nbsp; &nbsp; Act as the resilience authority for the engineering organization — shaping high-availability architecture decisions, influencing design reviews, and raising the floor on how we think about recoverability</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 10pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 10pt;">&nbsp; &nbsp; &nbsp; Partner with the Site Reliability Engineering team on multi-region deployments and high-availability design, ensuring cyber resilience is embedded in architecture from the start</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 10pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 10pt;">&nbsp; &nbsp; &nbsp; Champion IaC and immutable infrastructure practices across teams, not just within your own workstream</span></li> </ul> <h2><span style="font-size: 10pt; font-family: arial, helvetica, sans-serif;"><strong>What You'll Bring to Xometry:</strong></span></h2> <ul> <li style="font-family: arial, helvetica, s