AlphaSense is seeking a Staff Security Engineer, Business Continuity & Disaster Recovery to implement, maintain, and continuously improve our organization's resilience capabilities. You will execute the BCP/DR strategy and own its operational aspects, working cross-functionally to ensure AlphaSense can maintain critical operations during disruptions.
What You'll Do
- Design and implement comprehensive BCP/DR programs aligned with industry frameworks like ISO 22301 and NIST SP 800-34.
- Conduct Business Impact Analyses to identify critical functions, dependencies, and recovery priorities.
- Define and maintain Recovery Time Objectives and Recovery Point Objectives for all critical systems.
- Develop and maintain disaster recovery playbooks and runbooks for various incident scenarios.
- Create and manage crisis communication frameworks for security incidents and business disruptions.
- Lead tabletop exercises and disaster recovery drills to validate recovery procedures.
- Design and implement backup and recovery solutions for our AWS cloud infrastructure.
- Build automated backup workflows for databases, storage systems, applications, and configurations.
- Implement immutable backup strategies and offsite replication for ransomware resilience.
- Monitor backup operations, validate recovery procedures, and maintain backup integrity.
- Optimize backup windows, retention policies, and storage costs across cloud environments.
- Implement Infrastructure as Code for DR environment provisioning and configuration management.
- Develop automated failover and failback procedures for critical services.
- Design and maintain hot/warm/cold standby environments based on business requirements.
- Conduct regular disaster recovery testing and document test results with improvement recommendations.
- Build monitoring and alerting systems for backup health, replication lag, and recovery readiness.
- Maintain detailed recovery documentation including network diagrams and dependency maps.
- Coordinate with application teams to ensure application-consistent backups and recovery.
- Ensure BCP/DR programs meet regulatory requirements and customer commitments.
- Maintain comprehensive documentation of procedures, test results, and assessments.
- Track and report on key resilience metrics like RTO/RPO achievement and test success rates.
- Coordinate with internal audit and compliance teams during assessments.
- Participate in vendor risk assessments for third-party backup and recovery solutions.
What We're Looking For
- 7+ years of hands-on experience with cloud infrastructure (AWS required; GCP/Azure beneficial).
- Deep expertise in enterprise backup and recovery solutions like Veeam, Commvault, or AWS Backup.
- Strong understanding of cloud storage services (S3, EBS, EFS, RDS, DynamoDB).
- Proficiency with Infrastructure as Code tools like Terraform, CloudFormation, or Pulumi.
- Experience with containerized environments (ECS, EKS, Docker) and their backup/recovery patterns.
- Knowledge of database backup and recovery procedures for PostgreSQL, MySQL, MongoDB.
- Understanding of storage technologies, replication methods, and data protection architectures.
- 3+ years of experience in Business Continuity Planning and Disaster Recovery.
- Proven track record of designing and implementing BCP/DR programs for technology organizations.
- Experience conducting Business Impact Analyses and developing recovery strategies.
- Knowledge of BCP/DR frameworks and standards (ISO 22301, NIST SP 800-34, ISO 27001).
- Experience leading disaster recovery exercises and tabletop simulations.
- Understanding of incident management and crisis communication protocols.
- Strong scripting skills (Python, Bash, PowerShell) for automation and orchestration.
- Experience building CI/CD pipelines for infrastructure deployment and testing.
- Ability to write clean, maintainable code with proper error handling and logging.
- Understanding of configuration management tools like Ansible, Chef, or Puppet.
- Experience with monitoring and observability platforms like Datadog, CloudWatch, or Prometheus.
Nice to Have
- Professional certifications: CBCP, MBCP, ABCP, CISA, CRISC, or equivalent.
- AWS Certified Solutions Architect or AWS Certified SysOps Administrator.
- Certified Business Continuity Professional or Associate Business Continuity Professional.
- Previous experience implementing BCP/DR capabilities from the ground up or through major transformation.
- Knowledge of security incident response procedures and integration with DR processes.
- Experience with disaster recovery in regulated industries like finance or healthcare.
- Understanding of ransomware recovery strategies and immutable backup architectures.
- Experience with multi-region and multi-cloud recovery architectures.
- Experience in SaaS or B2B technology companies.
Technical Stack
- Cloud: AWS, GCP, Azure
- Backup: Veeam, Commvault, AWS Backup
- Storage: S3, EBS, EFS, RDS, DynamoDB
- Infrastructure as Code: Terraform, CloudFormation, Pulumi
- Containers: ECS, EKS, Docker
- Databases: PostgreSQL, MySQL, MongoDB
- Scripting: Python, Bash, PowerShell
- Configuration Mgmt: Ansible, Chef, Puppet
- Monitoring: Datadog, CloudWatch, Prometheus
Team & Environment
This role reports to the Director of Event Response and sits at the critical intersection of incident response and business continuity.
AlphaSense is an equal-opportunity employer committed to a work environment that supports, inspires, and respects all individuals and does not discriminate on the basis of race, color, sex, national origin, age, religion, marital status, sexual orientation, gender identity, gender expression, military or veteran status, disability, or any other non-merit factor.
