Staff Cloud Security Engineer

Xometry
Denver, Boston
Workplace: RemoteFull timeUSD 205,000 - 233,000 annuallyFunction: CybersecurityExperience: 8+ yearsSkills: ["Hands-on technical leadership","Threat modeling","Engineering standards","Automation","Lead recovery exercises"]

Lead cyber resilience for critical AWS workloads by designing an Isolated Recovery Environment that breaks ransomware and destructive wipe attack paths. Own recovery architecture, threat modeling, and backup configurations, and standardize Infrastructure as Code with Terraform for redeployable, hardened environments. Build automated recovery workflows and executable playbooks, develop Python/Go scripts to validate restored data integrity, and run end-to-end recovery drills while partnering with SRE on multi-region availability.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Xometry
Xometry
12 hours ago

Staff Cloud Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 8 hours agoStatus: Live

Job Summary

Lead cyber resilience for critical AWS workloads by designing an Isolated Recovery Environment that breaks ransomware and destructive wipe attack paths. Own recovery architecture, threat modeling, and backup configurations, and standardize Infrastructure as Code with Terraform for redeployable, hardened environments. Build automated recovery workflows and executable playbooks, develop Python/Go scripts to validate restored data integrity, and run end-to-end recovery drills while partnering with SRE on multi-region availability.
Location: Denver, Boston
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Design and build an Isolated Recovery Environment in AWS with immutable vaults to disrupt attacker kill chains.
  • •Threat model cloud-native attack patterns (IAM privilege escalation, backup deletion, ransomware persistence, lateral movement across accounts).
  • •Standardize and automate Infrastructure as Code so the entire stack can be redeployed via Terraform-based pipelines.
  • •Create executable recovery workflows and playbooks (API calls/CLI commands) that restore applications with verified code and clean data.
  • •Develop automation and lead recovery drills, including scripts to smoke test restored data and after-action improvements.

Pay and Benefits

Salary: USD 205,000 - 233,000 annually
Perks:401kHealth InsuranceDentalVisionPaid Leave

Key Requirements

  • •8+ years in complex cloud environments, including at least 3 years in AWS (EKS/Kubernetes experience is a plus).
  • •Strong Terraform skills to modularize complex environments for redeployment across accounts.
  • •Hands-on secure vault experience with a separate, highly restricted AWS account and tight network controls.
  • •Advanced shell scripting and proficiency in Python or Go to automate restoration tasks.
  • •Experience with CI/CD tooling (e.g., Scalr, GitHub Actions) to enable recovery pipelines.
Experience:8+ yearsCloud environmentsAWSGCPAzureCyber resilienceDisaster recoveryInfrastructure as code
Skills:Hands-on technical leadershipThreat modelingEngineering standardsAutomationLead recovery exercises
Certifications:AWS Security Specialty
Languages:English
Tech Stack:AWSGCPAzureEKSKubernetesTerraformPythonGoCI/CDScalrGitHub ActionsIAMVPCsSecurity groupsShell scriptingNIST SP 800-34E-VerifyAWS CLI

Company Brief

Xometry
Operates an on-demand digital manufacturing marketplace connecting buyers with manufacturing partners for CNC machining, 3D printing, sheet metal, injection molding and other custom parts, leveraging instant quoting and supply chain services.
Industry: Online Marketplaces
Company Size: Enterprise (1,001+ employees)
Revenue: USD 100M to 250M
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Rockville, United States
Founded: 2013
Glassdoor
Glassdoor: 3.8
WebsiteLinkedInGlassdoor