Staff Security Engineer

The role

You will own vulnerability management end-to-end and participate in areas including corporate IT, identity, AI security, and incident response. You will work closely with backend, firmware, data, R&D, and clinical teams.

What you will do

• Design and run a risk-based vulnerability management program
• Prioritize vulnerabilities by exploitability and business impact
• Define remediation SLAs and build automation for findings
• Own software supply chain security including SBOMs and container hygiene
• Partner with firmware and hardware teams on vulnerability handling for the Pod
• Run penetration testing and bug bounty programs
• Report vulnerability posture through metrics to executives and the board
• Set technical strategy for corporate IT and identity
• Remediate failing controls at the infrastructure level
• Define how AI is adopted safely and ethically

Required qualifications

• 10+ years across security and/or IT engineering, including time leading major initiatives
• Experience operating a SIEM (Datadog Cloud SIEM, Panther, Splunk, Elastic, or similar)
• Corporate IT fluency: Google Workspace admin, MDM, identity lifecycle
• Scripting ability (Python or similar)
• Clear security writing and documentation

Nice to have

• Vanta (or Drata) ownership through a real audit cycle for SOC 2, ISO 27001, or HIPAA
• Experience in a regulated or health-adjacent environment
• Incident response experience beyond tabletop exercises

Benefits

• Equity participation for every full-time team member
• Periodic equity refreshments based on performance
• A Pod
• Full access to health, vision, and dental insurance for you and your dependents
• Supplemental life insurance
• Flexible PTO
• Commuter benefits

About the company

Eight Sleep is a sleep fitness company building hardware, software, and AI technology. They operate as a high-performance team focused on human potential through optimal sleep.