Security Engineer

Eight Sleep is a sleep fitness company developing hardware, software, and AI technology to improve sleep and recovery. The Security Engineer will own and advance various parts of the security program, including corporate IT, identity, AI security, enterprise security, and cloud security, while partnering with engineering, R&D, clinical, and security teams.

Responsibilities:

• Google Workspace administration, device management, and the SaaS access lifecycle — onboarding, offboarding, and access reviews that hold up in an audit
• Keep compliance green with code, remediate failing tests at the infrastructure level, extend Vanta with custom tests, and automate evidence collection
• Partner with internal teams to find secure solutions to enable them to achieve the company’s goals
• Vulnerability management and endpoint management on the company’s corporate fleet
• Build processes for secure and ethical AI in corporate environments to minimize shadow AI/IT
• Act as the security team's second brain: triage inbound requests, run security reviews of internal tools, and run point on incidents
• Tackle new security engineering projects

Requirements:

• AI-first mindset. We empower the team with the best tools available to scale beyond themselves
• 4+ years across security and/or IT engineering, including time on a small team where you owned whatever came up
• Experience operating a SIEM (Datadog Cloud SIEM, Panther, Splunk, Elastic, or similar)
• Corporate IT fluency: Google Workspace admin, MDM, identity lifecycle
• Scripting ability (Python or similar)
• Clear security writing and documentation: triage notes, runbooks, and audit evidence that engineers, agents, auditors, and executives can act on
• Vanta (or Drata) ownership through a real audit cycle for SOC 2, ISO 27001, or HIPAA
• Experience in a regulated or health-adjacent environment
• Incident response experience beyond tabletop exercises