K

Keeper Security

Zero-knowledge data protection platform

Human Resources Generalist

Full-Time
No salary listed
Mid
Bachelor's
Remote in USA
RemoteCandidates in the Chicago metropolitan area may work a hybrid schedule; occasional shifted hours may be needed for Japan- and Australia-related operations.
People & HRHR Generalist & Employee Relations

About the job

Requirements
  • Two to five years of experience in human resources roles, with a focus on payroll, benefits, and compliance.
  • Knowledge of human resources laws, regulations, and best practices.
  • Excellent communication and interpersonal skills.
  • Ability to maintain confidentiality and handle sensitive information with discretion.
  • Proficiency in human resources information systems and applicant tracking systems.
  • Baseline knowledge of Microsoft Excel and Google Workspace.
  • Strong problem-solving skills and attention to detail.
  • Exceptional organizational and time-management skills.
  • Ability to multitask and prioritize tasks in a fast-paced environment.
  • Ability to collaborate proactively as part of a team.
  • Flexibility and adaptability to change.
  • Ability to work a flexible schedule, including occasional United States evening hours for Japanese and Australian employees.
Responsibilities
  • Collaborate cross-functionally to facilitate and support people processes and initiatives, focusing on continual improvement and a positive employee experience.
  • Own and manage the full-cycle new-hire onboarding process, including preparing offer letters; coordinating candidate vetting and pre-employment screening; updating new-hire and stock-option trackers; adding employees to ADP; organizing and conducting new-hire orientation across the United States, Japan, Canada, Australia, and additional employer-of-record countries; refreshing human-resources and information-technology onboarding materials for all locales; administering onboarding surveys; and supporting 30-, 60-, and 90-day check-ins, including a documented 90-day written review.
  • Own and coordinate the monthly performance-management process, including tracking, rollout, follow-ups, review approvals, anniversary-review emails, and manager notifications about promotion actions.
  • Process employee lifecycle changes, including new hires, promotions, transfers, leave, and terminations, by maintaining accurate HRIS and ADP records, creating Jira tickets, and updating stock-option issuance trackers.
  • Conduct the monthly dual-employment audit and coordinate related follow-up.
  • Collaborate with the People Team on HR metrics, reporting, and data requests while maintaining accurate employee lifecycle records and trackers.
  • Provide backup coverage for timecard assistance, open enrollment, benefits support, temporary benefit identification cards, compliance and audit documentation requests, Slack channel moderation, and annual bonus file creation.
  • Interact with employees and managers to provide level 1 employee-relations support and manager coaching.
  • Promote a positive work environment through employee-engagement initiatives and communication strategies, including owning the monthly People Team newsletter.
  • Assist with additional HR projects and initiatives as assigned.
  • Support hiring and onboarding through employer-of-record partners in Canada, Australia, and other international locations by coordinating documentation, onboarding steps, employee-data updates, and issue resolution with internal stakeholders and external providers.
  • Work occasional shifted schedules to assist with Japan-related HR operations, onboarding, and employee support, coordinating across time zones and adapting processes and materials to local needs.
  • Assist with and occasionally lead termination conversations and full-cycle offboarding.
  • Use artificial intelligence tools to streamline HR processes, improve operational efficiency, and enhance the employee experience.
  • Provide backup timecard assistance and support payroll coordination for all locales, partnering with primary payroll owners to resolve issues and maintain accurate records.
  • Prepare data input for anniversary, promotion, and compensation changes.
  • Facilitate the ongoing tracking and management of paid time off usage.
  • Assist in disseminating sales incentive plans and commission statements.
  • Document and notify employees and managers of promotion and compensation changes.
  • Assist with state payroll-tax and unemployment reporting and tracking requirements.
  • Serve as a backup resource for general benefits support, including employee questions, form completion, temporary benefit identification cards, and paid-time-off backup for annual open enrollment.
  • Assist with health savings account and flexible spending account tracking, payment processing, and facilitation.
  • Develop and maintain human-resources and information-technology onboarding materials for all locales and assist with updates to HR policies, process documentation, and employee files.
  • Maintain employee records in compliance with applicable laws and regulations.
  • Own harassment training creation, rollout, and completion tracking, and assist with other required compliance-training workflows.
  • Provide assistance with compliance and audit-related documentation and reporting requests, including SOC, ISO, IL5, and 401(k) audit support.
Desired Qualifications
  • Bachelor's degree in human resources, business administration, psychology, or a related field.
  • SHRM or HRCI certification at any level.
  • Strong Microsoft Office skills, particularly Excel and Word.
  • Background knowledge of California-, Colorado-, and Illinois-specific human resources laws.
  • Experience with human resources laws outside the United States.
  • Residence in the Chicagoland area.

About the company

K

Keeper Security

View
cbWebsite

Keeper Security provides a zero-knowledge data protection platform for individuals and businesses, delivered on a subscription basis. It protects sensitive information by encrypting data so that even Keeper cannot access it, ensuring user privacy. The platform is scalable to fit anyone from individuals to large enterprises and offers features like advanced provisioning, reporting tools, delegated administration, and 24/7 support. What sets Keeper apart is its zero-knowledge architecture combined with extensive auditing and certification, giving customers strong privacy guarantees and trust. The company also offers multiple plan options (personal, family, student, business, enterprise) and multi-year subscriptions to reduce costs and ensure ongoing access to updates and support. Overall, Keeper’s goal is to provide a trusted, private, and scalable security platform that keeps user data protected and accessible to authorized users through continuous improvements and reliable service.

Company Size

501-1,000

Company Stage

Growth Equity (Venture Capital)

Total Funding

$60.3M

Headquarters

Chicago, Illinois

Founded

2011

Get referred to Keeper Security

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • October 5, 2026 brought 100,000 enterprise customers and over $240 million ARR.
  • September 2026 SailPoint and October 2026 Freshservice integrations widen enterprise workflow distribution.
  • September 3, 2026 sales hires and 53.4% 2025 growth signal continued go-to-market acceleration.

What critics are saying

  • Microsoft, CyberArk, and 1Password attack Keeper's core identity-security bundle every quarter.
  • Keeper's integrations increase surface area; a single workflow flaw would damage its zero-knowledge trust.
  • Revenue concentration in password and PAM software leaves Keeper vulnerable if consolidation slows by 2027.

What makes Keeper Security unique

  • KeeperPAM unified passwords, secrets, session monitoring, and endpoint privilege into one platform.
  • Zero-knowledge architecture keeps customer credentials encrypted, including Freshservice and Google Chat integrations.
  • FedRAMP High, FIPS 140-3, and CISA CDM listing strengthen public-sector credibility.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Health Insurance
  • Dental Insurance
  • Vision Insurance
  • Life Insurance
  • Disability Insurance
  • 401(k) Retirement Plan
  • 401(k) Company Match
  • Unlimited Paid Time Off

Growth & Insights and Company News

Headcount

6 month growth

-1%

1 year growth

3%

2 year growth

0%
PR Newswire
Oct 16th, 2026
Keeper Security and Tenable integrate to streamline Cloud Risk detection, remediation and vulnerability assessment.

Keeper Security and Tenable integrate to streamline Cloud Risk detection, remediation and vulnerability assessment. Oct 16, 2026, 07:00 ET With new integrations, Keeper's identity security platform remediates cloud security findings discovered by Tenable in seconds and secures the privileged credentials used for vulnerability scanning CHICAGO, Oct. 16, 2026 /PRNewswire/ - Keeper Security, the leading zero-trust and zero-knowledge identity security platform, today announces native integrations with Tenable that eliminate the costly delay between identifying cloud security risks and remediating them while centralizing credential management for comprehensive vulnerability assessment. These integrations allow cloud security teams to move from detection to remediation in a single workflow, without managing manual tickets or switching between tools. Teams can now instantly act on Tenable's findings to rotate compromised credentials, enforce Just-In-Time access and remove standing privileges, all without leaving the Keeper platform. Organizations can also eliminate static credentials from scan policies by storing privileged credentials centrally in Keeper, enabling Tenable to retrieve them automatically at scan time for credentialed scanning of SSH, Windows and database targets. Tenable provides comprehensive visibility into exposed identities, risky access paths and misconfigurations across cloud environments. However, the gap between discovering these findings and executing remediation remains a persistent challenge for cloud security teams that typically manage this workflow manually across multiple tools. Teams can spend days or weeks chasing approvals and context-switching while risk persists in production, leaving the vulnerability window open for exploitation. Keeper's integration with Tenable closes this gap by sending cloud findings directly into Keeper's remediation engine. Once a finding arrives in Keeper's platform, security teams can immediately execute targeted fixes - including credential rotation, Just-In-Time (JIT) access enforcement and standing privilege removal - without leaving their existing workflow. When remediation is complete, Keeper automatically notifies Tenable and moves the finding to resolved status with zero manual follow-up. The entire cycle from detection to closure happens without teams switching platforms or managing tickets. "Organizations can't remediate findings if they aren't properly equipped to take action immediately," said Darren Guccione, CEO and Co-founder of Keeper Security. "As AI-powered threats increase the onslaught of cyber attacks and decrease the window of time in which cyber defenders can take action, this integration enables cloud security teams to implement fixes in seconds instead of weeks." Closed-Loop Remediation Without Exposure The integration preserves Keeper's zero-knowledge architecture at every step. Keeper Encrypter operates as a self-hosted gateway deployed inside the customer's environment, receiving webhook traffic from Tenable and encrypting the data exchange using customer-managed private keys. All synchronization between platforms happens through encrypted channels that remain fully contained within the organization's perimeter. Cloud infrastructure never sees unencrypted findings or credentials, and security teams achieve automated remediation without exposure. The remediation workflow is straightforward and comprehensive. Teams send relevant Tenable findings directly to Keeper, then select the appropriate remediation action for each finding. For infrastructure compromises, teams can rotate exposed credentials across databases, machines, cloud environments and directories. For access control issues, they can enforce JIT access to eliminate standing privileges at scale. For cloud identities flagged by Tenable, teams can onboard PAM User records directly without requiring separate database, machine or directory resources. Each remediation action is logged with a full audit trail and compliance visibility. "By connecting Tenable's cloud detection directly to Keeper's zero-trust remediation engine, we've built a closed-loop workflow that operates entirely within the customer's perimeter," said Craig Lurey, CTO and Co-founder of Keeper Security. "Security teams can immediately execute targeted fixes - from automated credential rotation to JIT access enforcement - without leaving their workflow or exposing unencrypted data." Centralized Credential Management for Credentialed Scans Tenable's integration with Keeper Commander solves another critical challenge: securing the credentials Tenable needs to log into systems during vulnerability scans. Today, organizations typically store passwords and SSH keys directly in Tenable scan policies, a practice that increases risk if either system is compromised. With this integration, organizations store those credentials securely in Keeper instead. When Tenable runs a scan and needs to log into a system, it requests the credential from Keeper, which delivers it securely, never allowing it to sit in Tenable's configuration. Credentialed scans allow the Tenable scanner to log in to target systems directly and perform deeper assessments than is possible without credentials, including checking installed software versions, configuration settings, patch levels and compliance status. This approach supports SSH, Windows (SMB) and database credentialed scans while keeping secrets out of scan policies. Credentials rotate in Keeper automatically, and Tenable picks up the new values at the next scan with zero manual policy updates. For Teams Managing Cloud Risk at Scale Both integrations are purpose-built for security operations teams managing cloud infrastructure at scale. Organizations can now detect cloud risks with Tenable, remediate them instantly through Keeper and run deeper vulnerability scans using centrally managed credentials without exposing secrets or switching between tools. The Keeper Commander and Tenable integrations are available now to Keeper customers with active KeeperPAM licenses. To learn more about connecting Tenable findings to Keeper's zero-trust remediation controls and securing credentials for authenticated scans, visit keepersecurity.com or schedule a demo with Keeper Security today. About Keeper Security Keeper Security is the leading zero-trust and zero-knowledge identity security solution, trusted by millions of people and thousands of organizations globally. KeeperPAM(R) is Keeper's privileged access management platform that unifies password and passkey management, secrets management, privileged session management and endpoint privilege management in a single cloud-native platform, protected with quantum-resistant encryption. KeeperAI(R) delivers real-time, AI-native threat detection across every privileged session. As AI agents proliferate and identity becomes the defining attack surface, Keeper governs access for humans, machines, non-human identities and AI agents, serving as the unified control plane for access, compliance and visibility across the enterprise. For more information, visit KeeperSecurity.com. SOURCE Keeper Security

Associated Press
Oct 16th, 2026
Keeper Security and Tenable integrate to fix cloud risks in seconds

Keeper Security has launched native integrations with Tenable that let cloud security teams move from spotting risks to fixing them in one workflow. The London-based announcement was made on October 16, 2026. Teams can act on Tenable's findings inside Keeper to rotate compromised credentials, enforce Just-In-Time access, and remove standing privileges. Keeper then tells Tenable when a fix is done and marks the finding resolved. Organisations can also store privileged credentials in Keeper rather than in Tenable scan policies. Tenable retrieves them at scan time for SSH, Windows, and database scans. A self-hosted gateway keeps data exchange encrypted within the customer's environment. The integrations are available now to Keeper customers with active KeeperPAM licences.

PR Newswire
Oct 5th, 2026
Keeper Security reaches 100,000 enterprise customers with $240M ARR amid identity security consolidation

Keeper Security has surpassed 100,000 enterprise customers globally, the company announced. The Chicago-based identity security platform provider also reported exceeding $240 million in annual recurring revenue and was recognised by Gartner as the second fastest-growing competitor in the worldwide security software market in 2025. The company serves organisations across finance, healthcare, telecommunications, manufacturing and the public sector in more than 150 countries. Keeper's platform consolidates password management, secrets governance, privileged session monitoring and other security tools into a single system. Recent innovations include KeeperAI, which provides real-time session monitoring, and integrations with platforms such as Microsoft Teams, Slack and ServiceNow. The platform uses zero-knowledge architecture to keep credentials encrypted with customers' private keys.

International Security Journal
Oct 2nd, 2026
Keeper Security reveals a Freshservice Workflow integration.

Keeper Security reveals a Freshservice Workflow integration. Keeper Security has announced a Freshservice Workflow integration that connects vault and privileged access requests to the ticketing systems IT and security teams already use. According to the company, the integration lets agents fulfill Keeper vault access and approval requests - including Endpoint Privilege Manager and Cloud SSO device approvals - directly from a Freshservice ticket. The workflow bottleneck experienced with other solutions is eliminated by removing the need for agents to leave tickets for approvals, log into a separate system or move decisions through unaudited side channels like email or chat. The company added that the integration also supports Endpoint Privilege Manager and Cloud SSO device approvals when paired with Keeper's ITSM for Freshservice app, so security admins maintain a single ticketing interface for both incident-driven access requests and routine approval workflows. Streamlining ticket management and approval. Access approvals often stall after the initial request creation. A user submits a helpdesk ticket, but the person fulfilling it has to leave that ticket, log into a separate system, track down the right record or folder and manually grant permission before reporting back. Each handoff introduces delays and moves access decisions outside of the audit trail, said Keeper Security. The Freshservice Workflow App removes that handoff. When an employee submits a request through a Freshservice service catalog item, the assigned agent can search through Keeper content, configure permissions and approve or deny the request from a Keeper Vault tab inside the ticket itself. Every action runs through a customer-hosted Keeper Commander ServiceMode endpoint, so Keeper's zero-knowledge encryption and access controls stay intact, and Keeper never stores credentials inside Freshservice's IT Service Management (ITSM) and Enterprise Service Management (ESM) platform. "Cannot move outside Keeper" Craig Lurey, CTO and Co-founder of Keeper Security commented: "The cryptographic boundary cannot move outside Keeper. "This integration processes every approval through Commander ServiceMode on infrastructure owned and controlled by the customer, so the attack surface doesn't expand when you wire Freshservice into your approval workflow. "Freshservice is the interface for the request, never the place where secrets are stored," Lurey added. "Increasingly important in the agentic era" Darren Guccione, CEO and Co-founder of Keeper Security stated: "Every access request is an identity decision, and the further those decisions drift from a governed system, the weaker the audit trail becomes. "Integrating Keeper into Freshservice keeps approval decisions inside a ticketing system that security teams already trust, which means zero standing privilege and full audit control stay intact." He concluded: "This becomes increasingly important in the agentic era, as access requests multiply across both human and machine identities." Latest issue. Connect with International Security Journal.

PR Newswire
Oct 1st, 2026
Keeper Security Freshservice Workflow App streamlines vault and Privileged Access request process.

Keeper Security Freshservice Workflow App streamlines vault and Privileged Access request process. Oct 01, 2026, 07:00 ET New integration enables IT and security teams to search the Keeper vault and submit access requests directly from the Freshservice ticket sidebar CHICAGO, Oct. 1, 2026 /PRNewswire/ - Keeper Security, the leading zero-trust and zero-knowledge identity security and Privileged Access Management (PAM) platform, today announces a Freshservice Workflow integration that connects vault and privileged access requests to the ticketing systems IT and security teams already use. The integration lets agents fulfill Keeper vault access and approval requests - including Endpoint Privilege Manager and Cloud SSO device approvals - directly from a Freshservice ticket. The workflow bottleneck experienced with other solutions is eliminated by removing the need for agents to leave tickets for approvals, log into a separate system or move decisions through unaudited side channels like email or chat. Streamlining Ticket Management and Approval Access approvals often stall after the initial request creation. A user submits a helpdesk ticket, but the person fulfilling it has to leave that ticket, log into a separate system, track down the right record or folder and manually grant permission before reporting back. Each handoff introduces delays and moves access decisions outside of the audit trail. The Keeper Security Freshservice Workflow App removes that handoff. When an employee submits a request through a Freshservice service catalog item, the assigned agent can search through Keeper content, configure permissions and approve or deny the request from a Keeper Vault tab inside the ticket itself. Every action runs through a customer-hosted Keeper Commander ServiceMode endpoint, so Keeper's zero-knowledge encryption and access controls stay intact, and Keeper never stores credentials inside Freshservice's IT Service Management (ITSM) and Enterprise Service Management (ESM) platform. "The cryptographic boundary cannot move outside Keeper," said Craig Lurey, CTO and Co-founder of Keeper Security. "This integration processes every approval through Commander ServiceMode on infrastructure owned and controlled by the customer, so the attack surface doesn't expand when you wire Freshservice into your approval workflow. Freshservice is the interface for the request, never the place where secrets are stored." "Every access request is an identity decision, and the further those decisions drift from a governed system, the weaker the audit trail becomes," said Darren Guccione, CEO and Co-founder of Keeper Security. "Integrating Keeper into Freshservice keeps approval decisions inside a ticketing system that security teams already trust, which means zero standing privilege and full audit control stay intact. This becomes increasingly important in the agentic era, as access requests multiply across both human and machine identities." The integration also supports Endpoint Privilege Manager and Cloud SSO device approvals when paired with Keeper's ITSM for Freshservice app, so security admins maintain a single ticketing interface for both incident-driven access requests and routine approval workflows. Availability The Keeper Security Freshservice Workflow App is available now in the Freshworks Marketplace for organizations with an active Keeper Commander deployment. To learn more about the integration, visit docs.keeper.io. About Keeper Security Keeper Security is the leading zero-trust and zero-knowledge identity security solution, trusted by millions of people and thousands of organizations globally. KeeperPAM(R) is Keeper's privileged access management platform that unifies password and passkey management, secrets management, privileged session management and endpoint privilege management in a single cloud-native platform, protected with quantum-resistant encryption. KeeperAI delivers real-time, AI-native threat detection across every privileged session. As AI agents proliferate and identity becomes the defining attack surface, Keeper governs access for humans, machines, non-human identities and AI agents, serving as the unified control plane for access, compliance and visibility across the enterprise. For more information, visit KeeperSecurity.com. SOURCE Keeper Security