Remote Senior Datadog Security & Observability Engineer

Keeper Security; United States; On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

Medical, Dental & Vision

Life Insurance

Disability Insurance

401K

Paid PTO including Bereavement/Jury-D坚

Job summary

Keeper Security is hiring a Senior DataDog Engineer to join our DevOps team. This role focuses on detection engineering and security observability across production and corporate environments, with Datadog-first responsibilities and collaboration with Security Operations, Infra, SRE and Engineering teams.

Ideal candidates bring deep Datadog production experience, strong AWS knowledge, and scripting ability, plus a proactive approach to threat intelligence and automation using AI-assisted tools.

Qualifications

• 4+ years of Datadog experience in detection engineering, SIEM engineering, security engineering, and security observability.
• Deep, hands-on production experience administering and engineering Datadog in complex cloud environments.
• Experience designing and maintaining Datadog log pipelines, processors, parsing rules, facets, indexes and retention strategies.
• Strong knowledge of AWS and cloud-native infrastructure.
• Proficiency with scripting using Python, PowerShell or similar languages.
• Experience using Datadog APIs, Terraform or similar infrastructure‑as‑code tools.

Responsibilities

• Own and continuously improve Datadog Cloud SIEM, security monitoring and observability capabilities across production and corporate environments
• Design, build and maintain detection and telemetry capabilities across Datadog, SentinelOne, Wiz and related security platforms
• Develop, test and tune high-fidelity Datadog detection rules aligned to real-world attack scenarios and adversary behaviors
• Improve alert quality by reducing false positives, eliminating noise and increasing detection accuracy
• Design and maintain Datadog log pipelines, processors, parsing rules, facets, indexes, archives and retention strategies
• Implement and mature detection-as-code practices for scalable, version-controlled and testable rule management
• Define and enforce logging, telemetry and instrumentation standards across cloud infrastructure, applications, endpoints and identity systems
• Build and optimize log ingestion, parsing, normalization, enrichment and routing workflows
• Automate onboarding of new telemetry sources and improve visibility across production and corporate environments
• Correlate signals across Datadog, EDR, cloud, identity and security platforms to improve detection depth and investigation quality
• Partner with Security Operations to improve triage workflows, incident response readiness and escalation quality
• Build Datadog dashboards, monitors, analytics and reporting that support operational decision-making across Security, SRE and Engineering
• Map and maintain detection coverage against MITRE ATT&CK and identify telemetry and detection gaps
• Perform detection gap assessments and evolve use cases based on threat intelligence, threat hunting and emerging risks
• Collaborate with cloud, infrastructure, product and compliance teams to strengthen secure logging and observability patterns throughout the software development lifecycle
• Use AI-assisted tools such as Claude, ChatGPT or similar platforms to support query development, detection engineering, investigations, automation and technical documentation

Skills

Datadog detection engineering

SIEM engineering

Datadog Cloud SIEM

AWS cloud

Python scripting

Terraform

Automation/investigation

Communication

Education

Bachelor’s degree in Computer Science/Engineering

Tools

Datadog

SentinelOne

Wiz

Job description

Keeper Security is hiring a Senior DataDog Engineer to join our DevOps team. This role focuses on detection engineering and security observability across production and corporate environments, with Datadog-first responsibilities and collaboration with Security Operations, Infra, SRE and Engineering teams.

Ideal candidates bring deep Datadog production experience, strong AWS knowledge, and scripting ability, plus a proactive approach to threat intelligence and automation using AI-assisted tools.