Senior Cloud Security Engineer - IAM & Incident Response

Dynatrace LLC; Boston (MA); Hybrid; USD 150,000 - 185,000; Full time

Benefits offered by this job

Unlimited PTO

Employee stock purchase plan

Medical/dental benefits

401(k) plan

Job summary

Dynatrace is seeking a Sr Cloud Security Engineer to own infrastructure security across AWS, Azure, and GCP within the Platform team. You will define security standards, automate guardrails, and drive incident response and risk-based decisions.

You will lead IAM design, secrets control, and least-privilege enforcement across cloud accounts and CI/CD pipelines, while coordinating with engineering and legal to maintain audit readiness for SOC 2 and ISO 27001.

Qualifications

• 4+ years in a security engineering or cloud security role, with direct ownership of AWS security at minimum (Azure/GCP a plus).
• Solid foundation in IAM, network security (security groups, VPCs, zero-trust), secrets management (Vault, AWS Secrets Manager), and SIEM/alerting tooling.
• Experience conducting or coordinating penetration tests and vulnerability assessments — knows the difference between a scanner report and an actual finding.
• Hands-on with IaC security (Terraform, CloudFormation) and CI/CD pipeline hardening.
• Familiarity with SOC 2 and/or ISO 27001 compliance requirements; has navigated an audit before.
• Clear communicator who can translate risk into business terms for non-security stakeholders.

Responsibilities

• Define and enforce infrastructure security standards across AWS, Azure, and GCP — translating policy into guardrails, automation, and engineering patterns that teams actually follow.
• Conduct threat modeling, vulnerability assessments, and penetration testing on platform services and cloud infrastructure; track findings to remediation.
• Own IAM policy design, secrets management, and least-privilege enforcement across cloud accounts, CI/CD pipelines, and service-to-service communication.
• Monitor security events, triage alerts, and lead incident response — from initial detection through root cause analysis and post-mortem.
• Drive compliance with SOC 2, ISO 27001, and internal security frameworks; partner with legal and ops to close gaps and maintain audit readiness.
• Evaluate and operate AI-powered threat detection and anomaly analysis tooling to sharpen signal-to-noise, identify attack patterns, and reduce mean time to respond.

Skills

IAM

Network security

Secrets management

SIEM/alerting

Penetration testing

IaC security

Terraform

CloudFormation

SOC 2

ISO 27001

Audit readiness

Communication

Tools

AWS

Azure

GCP

Terraform

CloudFormation

Job description

Dynatrace is seeking a Sr Cloud Security Engineer to own infrastructure security across AWS, Azure, and GCP within the Platform team. You will define security standards, automate guardrails, and drive incident response and risk-based decisions.

You will lead IAM design, secrets control, and least-privilege enforcement across cloud accounts and CI/CD pipelines, while coordinating with engineering and legal to maintain audit readiness for SOC 2 and ISO 27001.