Sr IT Security Analyst - G&A and Business Applications

Your role at Dynatrace

--------------------------

Dynatrace is seeking an experienced IT Security Analyst with a strong focus on business application and enterprise (G&A) system security. This role is responsible for evaluating, and implementing security controls across critical enterprise platforms such as NetSuite, SAP SuccessFactors, and other SaaS-based business systems.

The ideal candidate brings hands-on experience securing enterprise applications, understands how business systems integrate within the IT ecosystem, and can align security controls with compliance requirements (e.g., ISO 27001, SOC 2, SOX, FedRAMP).

Key Responsibilities

Business Application Security

* Assess and strengthen security controls for enterprise applications including: + NetSuite (ERP) + SAP SuccessFactors (HRIS) * Review system configurations, access models, and integrations to identify security risks * Partner with application owners to implement least privilege access and secure configuration standards

Integration & Data Flow Security

* Analyze and secure data flows between business systems and internal platforms * Evaluate API and middleware integrations (e.g., Boomi) for: + Authentication and authorization risks + Data exposure risks + Logging and monitoring gaps * Recommend and enforce secure integration patterns across the IT landscape

Security Controls & Risk Management

• Perform security reviews and risk assessments for new and existing G&A applications
• Define and recommend compensating controls where platform limitations exist
• Support threat modeling and identify combination risks across interconnected systems

Compliance & Governance

* Align application security controls with regulatory and audit requirements: + FedRAMP (where applicable to systems in scope) + ISO 27001 and SOC 2 control frameworks + SOX (financial controls, user access reviews) * Support audit activities including: + Evidence collection + Control vali