Sr Cloud Security Engineer

Dynatrace; Boston (MA); On-site; USD 150,000 - 185,000; Full time

Job summary

Dynatrace is seeking a Security Engineer to own infrastructure security across cloud environments within the Platform team. You will define standards for IAM policy, secrets management, threat detection, and incident response, and enforce them across AWS, Azure, and GCP.

You will conduct threat modeling, vulnerability assessments, and coordinate penetration testing while driving SOC 2 and ISO 27001 compliance.

Qualifications

• 4+ years in a security engineering or cloud security role, with direct ownership of AWS security at minimum (Azure/GCP a plus)
• Solid foundation in IAM, network security and secrets management; SIEM/alerting tooling
• Experience conducting or coordinating penetration tests and vulnerability assessments
• Hands-on with IaC security (Terraform, CloudFormation) and CI/CD pipeline hardening
• Familiarity with SOC 2 and/or ISO 27001 compliance requirements; able to translate risk to business terms

Responsibilities

• Define and enforce infrastructure security standards across AWS, Azure, and GCP; translate policy into guardrails and engineering patterns
• Conduct threat modeling, vulnerability assessments, and penetration testing on platform services and cloud infrastructure; track findings to remediation
• Own IAM policy design, secrets management, and least-privilege enforcement across cloud accounts, CI/CD pipelines, and service-to-service communication
• Monitor security events, triage alerts, and lead incident response — from initial detection through root cause analysis and post-mortem
• Drive compliance with SOC 2, ISO 27001 and internal security frameworks; partner with legal and ops to close gaps and maintain audit readiness
• Evaluate and operate AI-powered threat detection and anomaly analysis tooling to sharpen signal-to-noise and reduce mean time to respond

Skills

IAM

Network security

SIEM

Terraform

CloudFormation

CI/CD security

SOC 2

ISO 27001

Communication

Tools

Darktrace

Vectra

Wiz

Orca

Job description

Your role at Dynatrace

We're looking for a Security Engineer to own infrastructure security across our cloud environments. You'll work embedded within the Platform team, partnering with engineering and operations to set the security bar — from IAM policy and secrets management to threat detection and incident response. This is a hands-on, high-ownership role: you define the standards and you enforce them.

Responsibilities

• Define and enforce infrastructure security standards across AWS, Azure, and GCP — translating policy into guardrails, automation, and engineering patterns that teams actually follow
• Conduct threat modeling, vulnerability assessments, and penetration testing on platform services and cloud infrastructure; track findings to remediation
• Own IAM policy design, secrets management, and least-privilege enforcement across cloud accounts, CI/CD pipelines, and service-to-service communication
• Monitor security events, triage alerts, and lead incident response — from initial detection through root cause analysis and post-mortem
• Drive compliance with SOC 2, ISO 27001, and internal security frameworks; partner with legal and ops to close gaps and maintain audit readiness
• Evaluate and operate AI-powered threat detection and anomaly analysis tooling to sharpen signal-to-noise, identify attack patterns, and reduce mean time to respond

Required

What will help you succeed

• 4+ years in a security engineering or cloud security role, with direct ownership of AWS security at minimum (Azure/GCP a plus)
• Solid foundation in IAM, network security (security groups, VPCs, zero-trust), secrets management (Vault, AWS Secrets Manager), and SIEM/alerting tooling
• Experience conducting or coordinating penetration tests and vulnerability assessments — knows the difference between a scanner report and an actual finding
• Hands-on with IaC security (Terraform, CloudFormation) and CI/CD pipeline hardening
• Familiarity with SOC 2 and/or ISO 27001 compliance requirements; has navigated an audit before
• Clear communicator who can translate risk into business terms for non-security stakeholders

Nice To Have

• Certifications: AWS Security Specialty, CISSP, OSCP, or equivalent
• Experience with AI/ML-assisted security tooling (e.g., Darktrace, Vectra, Wiz, Orca)
• Background in SRE or platform engineering — understands the reliability tradeoffs alongside the security ones

Why you will love being a Dynatracer

• Dynatrace is a leader in unified observability and security.
• We provide a culture of excellence with competitive compensation packages designed to recognize and reward performance.
• Our employees work with the largest cloud providers, including AWS, Microsoft, and Google Cloud, and other leading partners worldwide to create strategic alliances.
• You'll get to work at the forefront of innovation with Dynatrace Intelligence—the industry's first agentic operations system. Bringing together deterministic and agentic AI, it helps teams understand what's happening, why it matters, and what to do next— automatically.
• Over 50% of the Fortune 100 companies are current customers of Dynatrace.

Compensation And Rewards

• The base salary range for this role is $150K-$185K. When determining your salary, we consider your experience, skills, education, and work location.
• Our total compensation package includes unlimited personal time off, an employee stock purchase plan, and a reward system.
• We also offer medical/dental benefits and a company-matched 401(k) plan for retirement.

Equal Employment Opportunity

All your information will be kept confidential according to EEO guidelines.

We offer competitive compensation, company-sponsored premium benefits, medical, dental, vacation/holidays, company matching 401(k) Plan, etc. Dynatrace is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, sex, color, gender identity, religion, national origin, ancestry, citizenship, physical abilities, age, sexual orientation, creed, disability status, veteran status, pregnancy, genetic status, or any other characteristic protected by law.

If your disability makes it difficult for you to use this site, please contact [e-mail]. Dynatrace participates in E-Verify, participant information in English and Spanish. Right to work information in English and Spanish. EEO is the Law.