Xometry has experienced massive growth over the past 3 years. We believe we need to continue to evolve our products and services to support future growth and market execution. With growth comes expansion in the form of Xometry employees, products amp; services, technology, process, and a new high bar for excellence.The role will be responsible for engineering and implementing Xometry’s Cyber Security program initiatives. This critical role ensures Xometry’s data are protected from unauthorized access and disclosure. We believe safeguarding our customers’ and partners’ information is more than just checking a box for compliance reasons; we believe it’s the right thing to do. We also believe a strong, adaptive Cyber Security program creates a virtuous cycle, one that builds trust with our customers and partners, which attracts more customers and partners, and so on. We expect the person in this role to apply his/her knowledge to mature Xometry’s Cyber Security program as the businesses continue to grow.This role requires the individual to balance the needs of the businesses and available resources while developing and implementing solutions to secure the company. We expect the person in this role to apply cyber security industry best practices (NIST, CSA, OWASP, ISO) to evolve Xometry’s existing processes and technology at the pace of the business growth. You will be working with members across the enterprise, including technology, product, finance, and other parts of Xometry to understand their current cyber security state, then identifying gaps and engineering solutions to align with the security program initiatives. You will own both the engineering, implementation, and documentation functions related to security. You will also work closely with the IT Support and System Reliability Engineering (SRE) teams to operationalize the solutions for the endpoints, infrastructure, and cloud services.Xometry’s platform and corporate functions utilize multiple cloud service providers. The ideal candidate would be well versed in cloud technologies, including IaaS, PaaS, SaaS, hybrid, and multi-cloud. The role requires the individual to understand the different security challenges across the entire technology stack, including physical, networking, and application. We expect the person to have excellent communication skills in order to work with the various business units, team members, and management. We also expect the individual to self-manage his/her time, ask for and provide help when needed, and own the challenge until it is resolved.What You Will Be Doing
- Collaborate with business and technical members across to the enterprise to understand the current cyber security state
- Identify gaps between existing controls and Xometry’s cyber security roadmap
- Engineer the solutions (processes, technologies) to mitigate the control gaps
- Present the proposed solutions to the Senior Information Security Officer
- Document and implement the new security controls
- Collaborate with IT Support and Site Reliability Engineering (SRE) to operationalize the controls
- Develop FAQ/Wiki to communicate new security capabilities to the enterprise
- Take part of on-call rotation to triage any potential security incidents
Who We Are Looking For
- In-depth knowledge of cloud technology and security (AWS, Terraform)
- In-depth knowledge of CI/CD tools (DAST, SAST, Gitlab)
- In-depth knowledge of information security best practices (NIST, CMMC, CSA, OWASP, ISO)
- Knowledge of application security (static analysis, dynamic analysis, automated testing)
- Knowledge of operating systems (Linux, Windows)
- Knowledge of virtualization technologies (Docker/Kubernetes)
- Knowledge of scripting languages (Powershell, bash)
- Curiosity and passion for all things security and technology related
- Willingness to ask for as well as provide help when needed
- Strong verbal/written communication and presentation skills, including an ability to effectively communicate with both business and technical teams
- Ability to influence others, strong attention to detail, excellent organization skills, and ability to time manage multiple projects
What's In It For You
- Competitive base salary, bonus amp; equity plan
- Health, dental, vision amp; life insurance coverage
- 401(k) and company match
- Paid time off
- You’ll be surrounded by a collaborative team that is working together to reshape the future of manufacturing
- We move fast and experiment across the organization, and we aren’t afraid to try new things
- We invest in growing our people personally and professionally
Xometry
is the source for on-demand manufacturing, offering massive capacity, instant online quotes, fast lead times, and affordable pricing. Our global network of over 5,000 man