Security Engineer

Summary

Eight Sleep is a sleep fitness company developing hardware, software, and AI technology to improve personalized sleep and recovery. The Security Engineer will own and scale broad portions of the security program across corporate IT, identity, AI security, enterprise, and cloud while partnering with engineering, R&D, clinical, and security leadership.

Responsibilities

• Google Workspace administration, device management, and the SaaS access lifecycle — onboarding, offboarding, and access reviews that hold up in an audit
• Keep compliance green with code, remediate failing tests at the infrastructure level, extend Vanta with custom tests, and automate evidence collection
• Partner with internal teams to find secure solutions to enable them to achieve the company’s goals
• Vulnerability management and endpoint management on the company’s corporate fleet
• Build processes for secure and ethical AI in corporate environments to minimize shadow AI/IT
• Act as the security team's second brain: triage inbound requests, run security reviews of internal tools, and run point on incidents
• Tackle new security engineering projects

Skills

• • AI-first mindset. We empower the team with the best tools available to scale beyond themselves
• • 4+ years across security and/or IT engineering, including time on a small team where you owned whatever came up
• • Experience operating a SIEM (Datadog Cloud SIEM, Panther, Splunk, Elastic, or similar)
• • Corporate IT fluency: Google Workspace admin, MDM, identity lifecycle
• • Scripting ability (Python or similar)
• • Clear security writing and documentation: triage notes, runbooks, and audit evidence that engineers, agents, auditors, and executives can act on
• • Vanta (or Drata) ownership through a real audit cycle for SOC 2, ISO 27001, or HIPAA
• • Experience in a regulated or health-adjacent environment
• • Incident response experience beyond tabletop exercises

Qualifications

Must Haves

• • AI-first mindset. We empower the team with the best tools available to scale beyond themselves
• • 4+ years across security and/or IT engineering, including time on a small team where you owned whatever came up
• • Experience operating a SIEM (Datadog Cloud SIEM, Panther, Splunk, Elastic, or similar)
• • Corporate IT fluency: Google Workspace admin, MDM, identity lifecycle
• • Scripting ability (Python or similar)
• • Clear security writing and documentation: triage notes, runbooks, and audit evidence that engineers, agents, auditors, and executives can act on

Nice to Haves

• • Vanta (or Drata) ownership through a real audit cycle for SOC 2, ISO 27001, or HIPAA
• • Experience in a regulated or health-adjacent environment
• • Incident response experience beyond tabletop exercises

Benefits

• Equity participation for every full-time team member, including periodic equity refreshes based on performance
• Immediate responsibility and accelerated career growth
• Every Eight Sleep employee receives their own Pod
• Full access to health, vision, and dental insurance for you and your dependents
• Supplemental life insurance
• Flexible PTO
• Commuter benefits to ease your daily commute
• Paid parental leave
• List of benefits may vary depending on your location