Security Engineer

JOIN THE SLEEP FITNESS MOVEMENT

At Eight Sleep, we’re on a mission to fuel human potential through optimal sleep. As the world’s first sleep fitness company, we’re redefining what it means to be well-rested and building the most advanced hardware, software, and AI technology to make it possible. Our products power peak mental, physical, and emotional performance by transforming every night of sleep into a personalized, data-driven recovery experience.

We are trusted by high performers, professional athletes, and health-conscious consumers in over 30 countries worldwide. Recognized as one of Fast Company’s Most Innovative Companies in 2019, 2022, and 2023, and twice named to TIME's “Best Inventions of the Year.” We operate like a high-performance team: fast, focused, and motivated by impact. We don’t just ship; we iterate, refine, and obsess over the details that help our members sleep better and wake up stronger.

Every role at Eight Sleep is a chance to create cutting-edge technology, collaborate with world‑class talent, and help shape a future where sleep isn’t passive - it’s a powerful tool for living better. If you’re tired of the ordinary and driven to build at the edge of what’s possible, this is your moment. Join us and lead the movement that’s transforming how the world sleeps and what we’re all capable of when we wake up.

HIGH STANDARDS. NO APOLOGIES.

We operate with intensity because our mission demands it. At Eight Sleep, we bring the same mindset as the world’s top performers: focused, relentless, and always pushing to be in the top 1% of our craft. Think Kobe Bryant’s mamba mentality, applied to bold ideas, next‑gen tech, and flawless execution. This isn’t a 9-to-5. Our team is deeply committed, often putting in 60+ hours a week –not because we’re told to, but because we’re invested.

We’re here to build fast, push limits, and deliver without compromise. If you thrive under pressure and want to do the most meaningful work of your career, you’ll feel right  you’re looking for something easier –this isn’t it.

You will work very closely with backend, firmware, and data engineers, with R&D and clinical teams, and directly with the Head of Security.

We are looking for an experienced Security Engineer who embraces an AI-first culture to enable them to scale beyond themselves. This is a generalist role with real ownership from day one: various portions of the security program including corporate IT, identity, AI Security, enterprise, and cloud. The ideal candidate has been "the security person" on a small team before — someone who takes whatever comes up, automates the second occurrence of anything, and writes clearly enough that engineers, auditors, and executives can all act on their work.

• Design and run a risk-based vulnerability management program spanning cloud infrastructure, containers, application dependencies, the corporate fleet, and connected devices.
• Prioritize by real-world exploitability and business impact — exploitation, reachability, internet exposure, and data sensitivity — not raw CVSS volume.
• Define remediation SLAs and build the automation that routes findings to the right owner, tracks them to closure, and escalates breaches before they become audit exceptions.
• Own software supply chain security: dependency and package risk, SBOMs, container image hygiene, and guardrails in CI/CD.
• Partner with firmware and hardware teams on vulnerability handling for the Pod, including coordinated disclosure intake and patch rollout.
• Run penetration testing and any bug bounty program — scoping, vendor management, triage, and verified fixes.
• Report vulnerability posture through clear metrics (exposure, SLA adherence,…