Staff Security Engineer

JOIN THE SLEEP FITNESS MOVEMENT At Eight Sleep, we’re on a mission to fuel human potential through optimal sleep. As the world’s first sleep fitness company, we’re redefining what it means to be well-rested and building the most advanced hardware, software, and AI technology to make it possible. Our products power peak mental, physical, and emotional performance by transforming every night of sleep into a personalized, data-driven recovery experience. We are trusted by high performers, professional athletes, and health-conscious consumers in over 30 countries worldwide. Recognized as one of Fast Company's Most Innovative Companies in 2019, 2022, and 2023, and twice named to TIME's “Best Inventions of the Year.” We operate like a high-performance team: fast, focused, and motivated by impact. We don’t just ship; we iterate, refine, and obsess over the details that help our members sleep better and wake up stronger.   Every role at Eight Sleep is a chance to create cutting-edge technology, collaborate with world-class talent, and help shape a future where sleep isn’t passive - it’s a powerful tool for living better. If you’re tired of the ordinary and driven to build at the edge of what’s possible, this is your moment. Join us and lead the movement that’s transforming how the world sleeps and what we’re all capable of when we wake up.   HIGH STANDARDS. NO APOLOGIES. We operate with intensity because our mission demands it. At Eight Sleep, we bring the same mindset as the world’s top performers: focused, relentless, and always pushing to be in the top 1% of our craft. Think Kobe Bryant’s mamba mentality, applied to bold ideas, next-gen tech, and flawless execution. This isn’t a 9-to-5. Our team is deeply committed, often putting in 60+ hours a week –not because we’re told to, but because we’re invested. We’re here to build fast, push limits, and deliver without compromise. If you thrive under pressure and want to do the most meaningful work of your career, you’ll feel right at home. If you’re looking for something easier –this isn’t it.   THE ROLE You will work very closely with backend, firmware, and data engineers, with R&D and clinical teams, and directly with the Head of Security. We are looking for an experienced Security Engineer who embraces an AI-first culture to enable them to scale beyond themselves. This is a generalist role with real ownership from day one: various portions of the security program including corporate IT, identity, AI Security, enterprise, and cloud. The ideal candidate has been "the security person" on a small team before — someone who takes whatever comes up, automates the second occurrence of anything, and writes clearly enough that engineers, auditors, and executives can all act on their work.   HOW YOU’LL CONTRIBUTE Own Vulnerability management end-to-end - Design and run a risk-based vulnerability management program spanning cloud infrastructure, containers, application dependencies, the corporate fleet, and connected devices. - Prioritize by real-world exploitability and business impact — exploitation, reachability, internet exposure, and data sensitivity — not raw CVSS volume. - Define remediation SLAs and build the automation that routes findings to the right owner, tracks them to closure, and escalates breaches before they become audit exceptions. - Own software supply chain security: dependency and package risk, SBOMs, container image hygiene, and guardrails in CI/CD. - Partner with firmware and hardware teams on vulnerability handling for the Pod, including coordinated disclosure intake and patch rollout. - Run penetration testing and any bug bounty program — scoping, vendor management, triage, and verified fixes. - Report vulnerability posture through clear metrics (exposure, SLA adherence, mean time to remediate) suitable for executives, auditors, and the board. Participate in other areas of security - We're looking for someone that can lean in to other areas as needed including - Set the technical strategy for corporate IT and identity: Google Workspace, device management, SSO, and an access lifecycle (onboarding, offboarding, access reviews) that holds up to audit. - Keep compliance green with code: remediate failing controls at the infrastructure level. - Define how AI is adopted safely and ethically across the company, building the governance and tooling that make sanctioned AI easier to use than shadow AI. - Assist in incident response. - Run security design reviews for new systems and internal tools, and partner with teams to find secure paths to their goals rather than blockers. - Act as the Head of Security’s technical counterpart and the team’s second brain: triage inbound work, make sound calls independently, and represent security in cross-functional decisions. - Mentor engineers inside and outside security and set the standards, runbooks, and patterns others build on. WHAT YOU NEED TO SUCCEED - AI-first mindset. We empower the team with the best tools available to scale beyond themselves - 10+ years across security and/or IT engineering, including time leading major initiatives - Experience operating a SIEM (Datadog Cloud SIEM, Panther, Splunk, Elastic, or similar) - Corporate IT fluency: Google Workspace admin, MDM, identity lifecycle - Scripting ability (Python or similar) - Clear security writing and documentation: triage notes, runbooks, and audit evidence that engineers, agents, auditors, and executives can act on BONUS POINTS FOR - Vanta (or Drata) ownership through a real audit cycle for SOC 2, ISO 27001, or HIPAA - Experience in a regulated or health-adjacent environment - Incident response experience beyond tabletop exercises   WHY JOIN EIGHT SLEEP? Innovation in a culture of excellence Join us in a workplace where innovation isn’t just encouraged - it’s a standard. Our flagship product, the Pod, is a testament to our culture of excellence, beloved by hundreds of thousands of customers worldwide. At Eight Sleep, you will be part of a team that continuously pushes the boundaries of technology in sleep fitness.   Immediate responsibility and accelerated career growth From your first day, you’ll take on substantial responsibilities that have a direct impact on our core business and product success. We are a small team that empowers you to own your projects and see the tangible effects of your efforts, enhancing both your professional growth and our company’s trajectory. Your path will be challenging but rewarding, perfect for those who thrive in fast-paced environments aiming for high standards.   Collaboration with exceptional talent Work alongside other bright minds like you: at Eight Sleep exceptional intelligence and a passion for breakthroughs are the norms. Our team members are not only experts in their fields but also avid innovators who thrive in our dynamic, fast-paced environment.   Equitable compensation and continuous equity investment We extend equity participation to every full-time team member, recognizing and rewarding your direct contributions to our success. This includes periodic equity refreshments based on performance, ensuring that as Eight Sleep grows and succeeds, so do you – perfectly aligning your achievements with the broader triumphs of the company.   Your own Pod - and other great benefits - Every Eight Sleep employee receives the very product that defines our mission: a Pod of their own. If you join us you’ll get your own Pod https://www.eightsleep.com/, along with*: - Full access to health, vision, and dental insurance for you and your dependents - Supplemental life insurance - Flexible PTO - Commuter benefits to ease your daily commute - Paid parental leave *List of benefits may vary depending on your location   At Eight Sleep we continually celebrate the diverse community different individuals cultivate. As an equal opportunity employer, we stay true to our values by ensuring everyone feels they can flourish and grow. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status.