Remote Senior IT Security Analyst, Enterprise App Security

Dynatrace; Boston; Hybrid; PHP 6,888,000 - 9,393,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid time off

Job summary

Dynatrace is seeking an experienced IT Security Analyst focused on securing business applications and G&A systems. You will evaluate and implement security controls across NetSuite, SAP SuccessFactors, and other SaaS platforms, aligning with ISO27001, SOC2, SOX, and FedRAMP requirements.

Responsibilities include strengthening controls, reviewing configurations, enabling least-privilege access, and securing data flows across integrations.

Qualifications

• 2+ years of experience in IT security, application security, or enterprise systems security.
• Experience securing NetSuite and SAP SuccessFactors is preferred.
• Familiarity with FedRAMP, ISO27001, and SOC2 controls is desirable.
• Experience with AWS security controls and API security is a plus.

Responsibilities

• Assess and strengthen security controls for enterprise applications including NetSuite (ERP) and SAP SuccessFactors (HRIS).
• Review configurations, access models, and integrations to identify security risks.
• Partner with application owners to enforce least-privilege access and secure configurations.
• Analyze data flows between business systems and internal platforms to secure data movement.
• Evaluate API/middleware integrations (DrBoomi) for authentication, authorization, data exposure, and logging gaps.
• Define compensating controls and support threat modeling across interconnected systems.

Skills

Analytical mindset

Risk identification

Cross-functional collaboration

Communication skills

IAM principles

RBAC & SoD

Security controls

Tools

NetSuite

SAP SuccessFactors

Dell Boomi

Okta

Azure AD

AWS IAM

SIEM

Job description

Dynatrace is seeking an experienced IT Security Analyst focused on securing business applications and G&A systems. You will evaluate and implement security controls across NetSuite, SAP SuccessFactors, and other SaaS platforms, aligning with ISO27001, SOC2, SOX, and FedRAMP requirements.

Responsibilities include strengthening controls, reviewing configurations, enabling least-privilege access, and securing data flows across integrations.