AI-First Security Engineer — Cloud, CI/CD & Vulnerability Champion

Eight Sleep, Inc.; Oregon; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Equity participation

Health, vision, and dental insurance

Flexible PTO

Commuter benefits

Paid parental leave

Job summary

Eight Sleep, Inc. is seeking an experienced Security Engineer to scale security programs across cloud, on-prem, and product systems.

You will own risk-based vulnerability management, software supply chain security, and cross-functional security initiatives with engineers, auditors, and executives. The role emphasizes automation, incident response, and secure-by-design practices in a fast-paced hardware-software environment.

Qualifications

• 10+ years across security and/or IT engineering.
• Experience operating a SIEM (Datadog Cloud SIEM, Panther, Splunk, Elastic, or similar).
• Corporate IT fluency: Google Workspace admin, MDM, identity lifecycle.
• Scripting ability (Python or similar).
• Clear security writing and documentation for engineers, auditors, and executives.

Responsibilities

• Design and lead risk-based vulnerability management across cloud, containers, apps, and devices.
• Define remediation SLAs and automate findings routing and closure.
• Own software supply chain security, SBOMs, container hygiene, and CI/CD guardrails.
• Collaborate with firmware and hardware teams on vulnerability handling for hardware products.
• Conduct penetration testing and manage bug bounty scope and fixes.
• Report vulnerability posture with metrics suitable for executives and board.

Skills

AI-first mindset

10+ years security/IT engineering

SIEM experience

Corporate IT fluency

Scripting (Python)

Clear security writing

Tools

Datadog Cloud SIEM

Panther

Splunk

Elastic

Job description

Eight Sleep, Inc. is seeking an experienced Security Engineer to scale security programs across cloud, on-prem, and product systems.

You will own risk-based vulnerability management, software supply chain security, and cross-functional security initiatives with engineers, auditors, and executives. The role emphasizes automation, incident response, and secure-by-design practices in a fast-paced hardware-software environment.