AI-First Security Engineer — Cloud Security & Vulnerabilities

Digitailor; United States; Remote; USD 150,000 - 230,000; Full time

Benefits offered by this job

Equity compensation

Health insurance

Flexible PTO

Paid parental leave

Commuter benefits

Job summary

Eight Sleep seeks an experienced Security Engineer to drive AI-first security across the stack, including cloud, firmware, and data systems. You’ll own vulnerability management, software supply chain security, and incident response, partnering with hardware, firmware, and IT teams to implement robust controls and governance.

The role emphasizes clear security writing, triage, and scalable processes, with impact from day one and opportunities to shape the company’s security posture in a

Qualifications

• 10+ years across security and/or IT engineering.
• Experience operating a SIEM (Datadog Cloud SIEM, Panther, Splunk, Elastic).
• Strong cloud and software supply chain security background.
• Proven ability to write clear triage notes, runbooks and audit evidence.

Responsibilities

• Own vulnerability management end-to-end and define remediation SLAs.
• Design and run a risk-based vulnerability program across cloud, containers, and devices.
• Own software supply chain security, SBOMs, and CI/CD guardrails.
• Lead incident response, audits, and coordinated disclosure activities.
• Mentor engineers and set security standards and playbooks.

Skills

AI-first mindset

Vulnerability management

Scripting (Python)

Incident response

CI/CD security

Security writing

Mentoring engineers

Tools

Datadog Cloud SIEM

Panther

Splunk

Elastic

Job description

Eight Sleep seeks an experienced Security Engineer to drive AI-first security across the stack, including cloud, firmware, and data systems. You’ll own vulnerability management, software supply chain security, and incident response, partnering with hardware, firmware, and IT teams to implement robust controls and governance.

The role emphasizes clear security writing, triage, and scalable processes, with impact from day one and opportunities to shape the company’s security posture in a