Senior Machine Learning Engineer, Cybersecurity / Threat Detection at Keeper

This role is designed for a senior machine learning expert with at least 5 years of experience who is excited about applying Vision-Language Models (VLMs) and L

Work type: remote

Location: Remote, US

Type: Full-time

Summary

This role is designed for a senior machine learning expert with at least 5 years of experience who is excited about applying Vision-Language Models (VLMs) and LLMs to real-time cybersecurity. You’ll be building the "first line of defense" for a global privileged access management platform, focusing on detecting threats in live remote sessions (SSH, RDP) using Python and Docker. The position offers excellent flexibility as a 100% remote role, with optional hybrid opportunities in Chicago or El Dorado Hills. While the base salary isn't listed, the company highlights "above market annual bonuses" and a comprehensive benefits package. This is a unique opportunity to move beyond general AI and work on domain-adapted models for anomaly detection in a zero-trust environment. **You might be a good fit if you...** * Have deep experience with dataset curation and evaluating model performance (e.g., GPT, Claude, or Gemini). * Are a "U.S. Person" (required for GovCloud-related work). * Are comfortable with real-time data streaming via WebSockets or WebRTC. * Enjoy a mix of high-level research and hands-on production engineering in cloud environments.

Job Description

Description

We are seeking a highly motivated and experienced Machine Learning Engineer to join our AI & Threat Analytics team. This is a 100% remote position with an opportunity to work a hybrid schedule for candidates based in the El Dorado Hills, CA or Chicago, IL metro area!

Keeper’s cybersecurity software is trusted by millions of people and thousands of organizations globally. Keeper is published in 23 languages and sold in over 150 countries. Join one of the fastest-growing cybersecurity companies and play a critical part in advancing Keeper’s AI-driven threat detection capabilities for our Privileged Access Management (PAM) platform.

About Keeper

Keeper Security is transforming cybersecurity for people and organizations around the world. Keeper’s affordable and easy-to-use solutions are built on a foundation of zero-trust and zero-knowledge security to protect every user on every device. Our award-winning, zero-trust, privileged access management platform deploys in minutes and seamlessly integrates with any tech stack and identity application to provide visibility, security, control, reporting and compliance across an entire enterprise. Trusted by millions of individuals and thousands of organizations, Keeper is an innovator of best-in-class password management, secrets management, privileged access, secure remote access and encrypted messaging. Learn more at [KeeperSecurity.com](https://www.keepersecurity.com/).

About the Role

You will tackle one of the most critical challenges in cybersecurity: detecting threats within privileged access sessions with high accuracy and low latency. Privileged accounts are prime targets for attackers, and the ML systems you build will serve as a first line of defense against anomalous and malicious behavior across SSH, RDP, VNC, and database connections. This role focuses on a hybrid detection approach combining vision-language models (VLMs) and domain-adapted ML models. You will work in a Python-based environment processing real-time session data via WebSocket, WebRTC, and protocol-level interfaces. The role is well-suited for engineers who enjoy both research-oriented work (datasets, evaluation, model training) and applied production engineering (inference systems, integration, and optimization).

Responsibilities

• Design, curate, and maintain datasets for training and evaluating threat detection models

• Build custom ML models for domain-specific threat classification and risk assessment

• Engineer and optimize prompts for vision-language models to analyze session behavior

• Create evaluation frameworks and benchmarks to measure accuracy, robustness, and reliability

• Develop Python-based inference services within Dockerized environments

• Integrate AI/ML capabilities with WebSocket, WebRTC, and low-level system interfaces for real-time analysis

• Write clean, maintainable code and produce clear technical documentation

• Monitor, troubleshoot, and optimize models in production for performance, scalability, and reliability

• 5+ years of professional experience in machine learning research or development

• Strong proficiency in Python

• Hands-on experience with dataset collection, curation, and labeling for ML training

• Experience designing model evaluation frameworks and performance benchmarks

• Experience working with vision-language models or large language models (e.g., GPT, Claude, Gemini, Qwen)

• Familiarity with prompt engineering techniques and LLM frameworks

• Experience building and deploying ML inference systems using Docker

• Working knowledge of graph data structures and their practical applications

• Familiarity with Git-based workflows and model repositories (e.g., Hugging Face)

• Experience using cloud platforms for ML deployment and inference (AWS, GCP, and/or Azure)

• Bachelor’s or Master’s degree in Computer Science, Machine Learning, Cybersecurity, or equivalent practical experience

• U.S. Person status required due to GovCloud involvement

• Experience with security, fraud, abuse detection, or anomaly detection systems

• Familiarity with PAM, identity, or privileged access environments

• Exposure to AWS Bedrock or similar managed AI services

• Knowledge of network protocols and low-level system interfaces

• Medical, Dental & Vision (Inclusive of domestic partnerships)

• Employer Paid Life Insurance & Employee/Spouse/Child Supplemental life

• Voluntary Short/Long Term Disability Insurance

• 401k (Roth/Traditional)

• A generous PTO plan that celebrates your commitment and seniority (including paid Bereavement/Jury Duty, etc)

• Above market annual bonuses

View this job on nocollar jobs