Security Engineer

📋 Job Overview

Join the Sleep Fitness Movement

At Eight Sleep, we’re on a mission to fuel human potential through optimal sleep. As the world’s first sleep fitness company, we’re redefining what it means to be well-rested and building the most advanced hardware, software, and AI technology to make it possible. Our products power peak mental, physical, and emotional performance by transforming every night of sleep into a personalized, data-driven recovery experience. We are trusted by high performers, professional athletes, and health-conscious consumers in over 30 countries worldwide. Recognized as one of Fast Company's Most Innovative Companies in 2019, 2022, and 2023, and twice named to TIME's “Best Inventions of the Year.” We operate like a high-performance team: fast, focused, and motivated by impact. We don’t just ship; we iterate, refine, and obsess over the details that help our members sleep better and wake up stronger.

Every role at Eight Sleep is a chance to create cutting-edge technology, collaborate with world-class talent, and help shape a future where sleep isn’t passive - it’s a powerful tool for living better. If you’re tired of the ordinary and driven to build at the edge of what’s possible, this is your moment. Join us and lead the movement that’s transforming how the world sleeps and what we’re all capable of when we wake up.

🏢 About Eight Sleep

High Standards. No Apologies.

We operate with intensity because our mission demands it. At Eight Sleep, we bring the same mindset as the world’s top performers: focused, relentless, and always pushing to be in the top 1% of our craft. Think Kobe Bryant’s mamba mentality, applied to bold ideas, next-gen tech, and flawless execution. This isn’t a 9-to-5. Our team is deeply committed, often putting in 60+ hours a week –not because we’re told to, but because we’re invested. We’re here to build fast, push limits, and deliver without compromise. If you thrive under pressure and want to do the most meaningful work of your career, you’ll feel right at home. If you’re looking for something easier –this isn’t it.

🎯 The Role

You will work very closely with backend, firmware, and data engineers, with R&D and clinical teams, and directly with the Head of Security.

We are looking for an experienced Security Engineer who embraces an AI-first culture to enable them to scale beyond themselves. This is a generalist role with real ownership from day one: various portions of the security program including corporate IT, identity, AI Security, enterprise, and cloud. The ideal candidate has been \"the security person\" on a small team before — someone who takes whatever comes up, automates the second occurrence of anything, and writes clearly enough that engineers, auditors, and executives can all act on their work.

✅ Key Responsibilities

• Google Workspace administration, device management, and the SaaS access lifecycle — onboarding, offboarding, and access reviews that hold up in an audit.
• Keep compliance green with code, remediate failing tests at the infrastructure level, extend Vanta with custom tests, and automate evidence collection.
• Partner with internal teams to find secure solutions to enable them to achieve the company’s goals.
• Vulnerability management and endpoint management on the company’s corporate fleet.
• Build processes for secure and ethical AI in corporate environments to minimize shadow AI/IT.
• Act as the security team's second brain: triage inbound requests, run security reviews of internal tools, and run point on incidents
• Tackle new security engineering projects.

📌 Required Qualifications

• AI-first mindset. We empower the team with the best tools available to scale beyond themselves
• 4+ years across security and/or IT engineering, including time on a small team where you owned whatever came up
• Experience operating a SIEM (Datadog Cloud SIEM, Panther, Splunk, Elastic, or similar)
• Corporate IT fluency: Google Workspace admin, MDM, identity lifecycle
• Scripting ability (Python or similar)
• Clear security writing and documentation: triage notes, runbooks, and audit evidence that engineers, agents, auditors, and executives can act on

⭐ Desirable Experience

• Vanta (or Drata) ownership through a real audit cycle for SOC 2, ISO 27001, or HIPAA
• Experience in a regulated or health-adjacent environment
• Incident response experience beyond tabletop exercises

🎁 Benefits

• Innovation in a culture of excellence
• Immediate responsibility and accelerated career growth
• Collaboration with exceptional talent
• Equitable compensation and continuous equity investment

🛂 Visa & Eligibility