Sr IT Security Analyst - G&A and Business Applications

Dynatrace is seeking an experienced IT Security Analyst with a strong focus on business application and enterprise (G&A) system security. This role is responsible for evaluating, and implementing security controls across critical enterprise platforms such as NetSuite, SAP SuccessFactors, and other SaaS-based business systems.

Responsibilities:

• Assess and strengthen security controls for enterprise applications including:
• NetSuite (ERP)
• SAP SuccessFactors (HRIS)
• Review system configurations, access models, and integrations to identify security risks
• Partner with application owners to implement least privilege access and secure configuration standards
• Analyze and secure data flows between business systems and internal platforms
• Evaluate API and middleware integrations (e.g., Boomi) for:
• Authentication and authorization risks
• Data exposure risks
• Logging and monitoring gaps
• Recommend and enforce secure integration patterns across the IT landscape
• Perform security reviews and risk assessments for new and existing G&A applications
• Define and recommend compensating controls where platform limitations exist
• Support threat modeling and identify combination risks across interconnected systems
• Align application security controls with regulatory and audit requirements:
• FedRAMP (where applicable to systems in scope)
• ISO 27001 and SOC 2 control frameworks
• SOX (financial controls, user access reviews)
• Support audit activities including:
• Evidence collection
• Control validation
• Remediation tracking
• Contribute to securing SaaS and cloud-hosted applications within AWS environments
• Review IAM configurations, network exposure, and platform-level risks
• Partner with cloud and platform teams to ensure consistent security control implementation

Requirements:

• 2+ years of experience in IT security, application security, or enterprise systems security
• Hands-on experience securing or administering one or more of the following: NetSuite, SAP SuccessFactors
• Strong understanding of: Identity and access management (IAM) principles, Role-based access control (RBAC) and segregation of duties (SoD), Secure system integration and API security
• Experience working with compliance frameworks: Familiarity with FedRAMP, ISO 27001, and SOC 2
• Experience with AWS security controls (IAM, logging, network security)
• Knowledge of enterprise logging/monitoring practices (SIEM integration, audit logging)
• Experience supporting audits or working with internal/external auditors
• Experience with Dell Boomi or similar iPaaS solutions
• Familiarity with identity providers (e.g., Okta, Azure AD) and SSO integrations
• Familiarity with SOX controls for financial systems
• Ability to translate business processes into security control requirements
• Strong analytical mindset with focus on risk identification and mitigation
• Experience working cross-functionally with IT, Security, and business stakeholders
• Clear communication skills with ability to explain risks and recommendations