Staff Cyber Resilience Engineer

What You’ll Do

Own Our Recovery Architecture

• Design and build our Isolated Recovery Environment — a hardened AWS account with immutable vaults that break the attacker’s kill chain before it reaches our data.
• Threat model our environment with a deep understanding of cloud-native attack patterns: IAM privilege escalation, backup deletion, ransomware persistence, and lateral movement across accounts.
• Validate and continuously improve backup configurations to ensure recoverability, not just existence.

Standardize and Automate Infrastructure

• Lead our transition to 100% Infrastructure as Code. Every asset (VPCs, IAM roles, security groups) must be defined in Terraform so we can redeploy the entire stack into a clean account via automated pipeline.
• Build automated recovery workflows that can tear down a compromised environment and bootstrap a fresh, hardened one from verified code and clean data.
• Write and maintain executable recovery playbooks that detail the exact API calls and CLI commands needed to restore the application — tested, versioned, and runnable, not static documents.

Validate, Test, and Lead Exercises

• Lead recovery exercises that test the organization end-to-end.