Staff Security Engineer
Eight Sleep
- United States
- Lead/Staff
- 4+ years
- Posted
Skills
Required
- Python
- SIEM
- Datadog
- Cloud
- Panther
- Splunk
- Elastic
- Vanta
- Drata
- SOC 2 / ISO 27001 / HIPAA
Join our team as a Security Engineer, where you will have real ownership from day one in various aspects of our security program. You will work closely with backend, firmware, and data engineers, as well as R&D and clinical teams. Your responsibilities will include Google Workspace administration, compliance management, vulnerability management, and building processes for secure AI in corporate environments. You will also act as the security team's second brain, triaging inbound requests, running security reviews of internal tools, and tackling new security engineering projects.
We are looking for an experienced Security Engineer who embraces an AI-first culture to enable them to scale beyond themselves
About Eight Sleep
AI-first mindset. We empower the team with the best tools available to scale beyond themselves
Responsibilities
- Collaborer étroitement avec les équipes de backend, de firmware et de données pour assurer la sécurité des systèmes.
- Gérer l'administration de Google Workspace, la gestion des appareils et le cycle de vie de l'accès SaaS.
- Participer à la gestion des vulnérabilités et à la gestion des points de terminaison sur la flotte d'entreprise.
Requirements
- The ideal candidate has been "the security person" on a small team before — someone who takes whatever comes up, automates the second occurrence of anything, and writes clearly enough that engineers, auditors, and executives can all act on their work
Scripting ability (Python or similar)
- Clear security writing and documentation: triage notes, runbooks, and audit evidence that engineers, agents, auditors, and executives can act on
- Experience operating a SIEM (Datadog Cloud SIEM, Panther, Splunk, Elastic, or similar)
- 4+ years across security and/or IT engineering, including time on a small team where you owned whatever came up
- Vanta (or Drata) ownership through a real audit cycle for SOC 2, ISO 27001, or HIPAA
Preferred
- Experience in a regulated or health-adjacent environment
- Incident response experience beyond tabletop exercises
Benefits
- Corporate IT fluency: Google Workspace admin, MDM, identity lifecycle
jobapplier