Senior Observability Engineer (Telemetry & Detection)

Keeper Security • El Dorado Hills, CA

27d • Remote

About The Position

As a Senior Observability Engineer, you will own the evolution of Keeper’s observability platform, from data ingestion and normalization to alerting strategies and operational dashboards. Your focus will be on reducing noise, improving detection quality, and enabling faster, more confident decision-making across SOC, NOC, Infrastructure, and Engineering teams. This role emphasizes outcomes over dashboards, and requires strong technical judgment, cross-functional collaboration, and the ability to design observability systems that scale with both platform growth and threat complexity.

Requirements

• 6+ years of experience in observability, monitoring, SIEM, or security analytics engineering roles
• Deep hands-on experience working with platforms such as Splunk, Datadog, Rapid7, or equivalent tools
• Proven ability to onboard and manage large, diverse telemetry datasets across applications, infrastructure, networks, and security tooling
• Strong understanding of logs, metrics, traces, events, and alerting strategies
• Experience designing dashboards and alerts for operational decision-making rather than reporting
• Experience supporting or working closely with SOC, NOC, Infrastructure, and Engineering teams
• Ability to translate complex technical data into clear, actionable insight
• Strong problem-solving skills and a bias toward building scalable, maintainable systems

Nice To Haves

• Experience operating in cloud-native, high-scale SaaS environments
• Exposure to detection engineering, incident response, or threat analytics
• Experience with automation, data enrichment pipelines, APIs, or SOAR tooling
• Prior ownership of observability or telemetry platforms at scale

Responsibilities

• Design, build, and maintain observability platforms using tools such as Splunk, Datadog, Rapid7, and similar ecosystems
• Ingest, normalize, and enrich diverse telemetry sources, including application telemetry, cloud and infrastructure logs, network data, and security events
• Architect alerts and dashboards that prioritize actionable signal over noise for SOC, NOC, Infrastructure, and Engineering teams
• Partner with cross-functional stakeholders to understand how data is consumed and what “actionable” means in real operational contexts
• Define and enforce telemetry standards and best practices to ensure consistency, scalability, and long-term maintainability
• Continuously improve detection and monitoring maturity by reducing alert fatigue and improving time-to-detect and time-to-respond
• Anticipate future observability needs based on platform scale, architectural changes, and evolving threat and reliability landscapes
• Automate data enrichment and operational workflows where appropriate to improve context and response efficiency

Benefits

• Medical, Dental & Vision (inclusive of domestic partnerships)
• Employer Paid Life Insurance & Employee/Spouse/Child Supplemental life
• Voluntary Short/Long Term Disability Insurance
• 401K (Roth/Traditional)
• A generous PTO plan that celebrates your commitment and seniority (including paid Bereavement/Jury Duty, etc)
• Above market annual bonuses

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 501-1,000 employees