Sr IT Security Analyst - G&A and Business Applications

Dynatrace; Boston; Hybrid; PHP 6,888,000 - 9,393,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid time off

Job summary

Dynatrace is seeking an experienced IT Security Analyst focused on securing business applications and G&A systems. You will evaluate and implement security controls across NetSuite, SAP SuccessFactors, and other SaaS platforms, aligning with ISO27001, SOC2, SOX, and FedRAMP requirements.

Responsibilities include strengthening controls, reviewing configurations, enabling least-privilege access, and securing data flows across integrations.

Qualifications

• 2+ years of experience in IT security, application security, or enterprise systems security.
• Experience securing NetSuite and SAP SuccessFactors is preferred.
• Familiarity with FedRAMP, ISO27001, and SOC2 controls is desirable.
• Experience with AWS security controls and API security is a plus.

Responsibilities

• Assess and strengthen security controls for enterprise applications including NetSuite (ERP) and SAP SuccessFactors (HRIS).
• Review configurations, access models, and integrations to identify security risks.
• Partner with application owners to enforce least-privilege access and secure configurations.
• Analyze data flows between business systems and internal platforms to secure data movement.
• Evaluate API/middleware integrations (DrBoomi) for authentication, authorization, data exposure, and logging gaps.
• Define compensating controls and support threat modeling across interconnected systems.

Skills

Analytical mindset

Risk identification

Cross-functional collaboration

Communication skills

IAM principles

RBAC & SoD

Security controls

Tools

NetSuite

SAP SuccessFactors

Dell Boomi

Okta

Azure AD

AWS IAM

SIEM

Job description

Your role at Dynatrace

Dynatrace is seeking an experienced IT Security Analyst with a strong focus on business application and enterprise (G&A) system security. This role is responsible for evaluating, and implementing security controls across critical enterprise platforms such as NetSuite, SAP SuccessFactors, and other SaaS-based business systems.The ideal candidate brings hands-on experience securing enterprise applications, understands how business systems integrate within the IT ecosystem, and can align security controls with compliance requirements (e.g., ISO 27001, SOC2, SOX, FedRAMP).

Key Responsibilities

Business Application Security

• Assess and strengthen security controls for enterprise applications including:
  • NetSuite (ERP)
  • SAP SuccessFactors (HRIS)
• Review system configurations, access models, and integrations to identify security risks
• Partner with application owners to implement least privilege access and secure configuration standards

Integration & Data Flow Security

• Analyze and secure data flows between business systems and internal platforms
• Evaluate API and middleware integrations (e.g., Boomi) for:
  • Authentication and authorization risks
  • Data exposure risks
  • Logging and monitoring gaps
• Recommend and enforce secure integration patterns across the IT landscape

Security Controls & Risk Management

• Perform security reviews and risk assessments for new and existing G&A applications
• Define and recommend compensating controls where platform limitations exist
• Support threat modeling and identify combination risks across interconnected systems

Compliance & Governance

• Align application security controls with regulatory and audit requirements:
  • FedRAMP (where applicable to systems in scope)
  • ISO27001 and SOC2 control frameworks
  • SOX (financial controls, user access reviews)
• Support audit activities including:
  • Evidence collection
  • Control validation
  • Remediation tracking

Cloud & Platform Security (Optional)

• Contribute to securing SaaS and cloud-hosted applications within AWS environments
• Review IAM configurations, network exposure, and platform-level risks
• Partner with cloud and platform teams to ensure consistent security control implementation

This is a remote eligible position. Candidates who live within a 45 mile radius of Boston, MA; Detroit, MI; and Denver, CO will be required to work hybrid (2 days per week) out of our Dyntrace office. Candidates are required to work EST hours for this position.

What will help you succeed

Minimum Requirements

• 2+ years of experience in IT security, application security, or enterprise systems security

Preferred Requirements

• Hands-on experience securing or administering one or more of the following:
  • NetSuite
  • SAP SuccessFactors
• Strong understanding of:
  • Identity and access management (IAM) principles
  • Role‑based access control (RBAC) and segregation of duties (SoD)
  • Secure system integration and API security
• Experience working with compliance frameworks:
  • Familiarity with FedRAMP, ISO27001, and SOC2
• Experience with AWS security controls (IAM, logging, network security)
• Knowledge of enterprise logging/monitoring practices (SIEM integration, audit logging)
• Experience supporting audits or working with internal/external auditors
• Experience with Dell Boomi or similar iPaaS solutions
• Familiarity with identity providers (e.g., Okta, Azure AD) and SSO integrations
• Familiarity with SOX controls for financial systems
• Ability to translate business processes into security control requirements
• Strong analytical mindset with focus on risk identification and mitigation
• Experience working cross‑functionally with IT, Security, and business stakeholders
• Clear communication skills with ability to explain risks and recommendations

Why you will love being a Dynatracer

• A one-product software company creating real value for the largest enterprises and millions of end customers globally, striving for a world where software works perfectly.
• Working with the latest technologies and at the forefront of innovation in tech on scale; but also, in other areas like marketing, design, or research.
• A team that thinks outside the box, welcomes unconventional ideas, and pushes boundaries.
• An environment that fosters innovation, enables creative collaboration, and allows you to grow.
• A globally unique and tailor‑made career development program recognizing your potential, promoting your strengths, and supporting you in achieving your career goals.
• A truly international mindset that is being shaped by the diverse personalities, expertise, and backgrounds of our global team.
• A relocation team that is eager to help you start your journey to a new country, always there to support and by your side.
• Attractive compensation packages and stock purchase options with numerous benefits and advantages.

Compensation and Rewards

DOE, salary $110K - $150K, plus Health, Dental, Life, STD, LTD, 401K, PTO. Total compensation may vary depending on candidate experience/education and location.

We offer competitive compensation, company-sponsored premium benefits, medical, dental, vacation/holidays, company matching 401(k) Plan, etc. Dynatrace is an Equal Opportunity/Affirmative Action employer.

Equal Employment Opportunity

All your information will be kept confidential according to EEO guidelines.

Dynatrace is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, sex, color, gender identity, religion, national origin, ancestry, citizenship, physical abilities, age, sexual orientation, creed, disability status, veteran status, pregnancy, genetic status, or any other characteristic protected by law.

If your disability makes it difficult for you to use this site, please contact [e-mail].

Dynatrace participates in E-Verify, participant information in English and Spanish. Right to work information in English and Spanish. EEO is the Law.