Sr Cloud Security Engineer

Dynatrace is looking for a Security Engineer to own infrastructure security across its cloud environments. The role focuses on defining and enforcing security standards across AWS, Azure, and GCP, while handling IAM, secrets management, threat detection, vulnerability assessment, compliance, and incident response for platform services.

Responsibilities:

• Define and enforce infrastructure security standards across AWS, Azure, and GCP — translating policy into guardrails, automation, and engineering patterns that teams actually follow
• Conduct threat modeling, vulnerability assessments, and penetration testing on platform services and cloud infrastructure; track findings to remediation
• Own IAM policy design, secrets management, and least-privilege enforcement across cloud accounts, CI/CD pipelines, and service-to-service communication
• Monitor security events, triage alerts, and lead incident response — from initial detection through root cause analysis and post-mortem
• Drive compliance with SOC 2, ISO 27001, and internal security frameworks; partner with legal and ops to close gaps and maintain audit readiness
• Evaluate and operate AI-powered threat detection and anomaly analysis tooling to sharpen signal-to-noise, identify attack patterns, and reduce mean time to respond

Requirements:

• 4+ years in a security engineering or cloud security role, with direct ownership of AWS security at minimum (Azure/GCP a plus)
• Solid foundation in IAM, network security (security groups, VPCs, zero-trust), secrets management (Vault, AWS Secrets Manager), and SIEM/alerting tooling
• Experience conducting or coordinating penetration tests and vulnerability assessments — knows the difference between a scanner report and an actual finding
• Hands-on with IaC security (Terraform, CloudFormation) and CI/CD pipeline hardening
• Familiarity with SOC 2 and/or ISO 27001 compliance requirements; has navigated an audit before
• Clear communicator who can translate risk into business terms for non-security stakeholders
• Certifications: AWS Security Specialty, CISSP, OSCP, or equivalent
• Experience with AI/ML-assisted security tooling (e.g., Darktrace, Vectra, Wiz, Orca)
• Background in SRE or platform engineering — understands the reliability tradeoffs alongside the security ones