Senior Cloud Security Engineer - IAM & Threat Response

Dynatrace; Boston (MA); On-site; USD 150,000 - 185,000; Full time

Job summary

Dynatrace is seeking a Security Engineer to own infrastructure security across cloud environments within the Platform team. You will define standards for IAM policy, secrets management, threat detection, and incident response, and enforce them across AWS, Azure, and GCP.

You will conduct threat modeling, vulnerability assessments, and coordinate penetration testing while driving SOC 2 and ISO 27001 compliance.

Qualifications

• 4+ years in a security engineering or cloud security role, with direct ownership of AWS security at minimum (Azure/GCP a plus)
• Solid foundation in IAM, network security and secrets management; SIEM/alerting tooling
• Experience conducting or coordinating penetration tests and vulnerability assessments
• Hands-on with IaC security (Terraform, CloudFormation) and CI/CD pipeline hardening
• Familiarity with SOC 2 and/or ISO 27001 compliance requirements; able to translate risk to business terms

Responsibilities

• Define and enforce infrastructure security standards across AWS, Azure, and GCP; translate policy into guardrails and engineering patterns
• Conduct threat modeling, vulnerability assessments, and penetration testing on platform services and cloud infrastructure; track findings to remediation
• Own IAM policy design, secrets management, and least-privilege enforcement across cloud accounts, CI/CD pipelines, and service-to-service communication
• Monitor security events, triage alerts, and lead incident response — from initial detection through root cause analysis and post-mortem
• Drive compliance with SOC 2, ISO 27001 and internal security frameworks; partner with legal and ops to close gaps and maintain audit readiness
• Evaluate and operate AI-powered threat detection and anomaly analysis tooling to sharpen signal-to-noise and reduce mean time to respond

Skills

IAM

Network security

SIEM

Terraform

CloudFormation

CI/CD security

SOC 2

ISO 27001

Communication

Tools

Darktrace

Vectra

Wiz

Orca

Job description

Dynatrace is seeking a Security Engineer to own infrastructure security across cloud environments within the Platform team. You will define standards for IAM policy, secrets management, threat detection, and incident response, and enforce them across AWS, Azure, and GCP.

You will conduct threat modeling, vulnerability assessments, and coordinate penetration testing while driving SOC 2 and ISO 27001 compliance.