Security Analyst/Penetration Tester (Remote - U.S. Eastern or Central Time Zones)

Company Description

Dynatrace provides software intelligence to simplify cloud complexity and accelerate digital transformation. With automatic and intelligent observability at scale, our all-in-one platform delivers precise answers about the performance and security of applications, the underlying infrastructure, and the experience of all users to enable organizations to innovate faster, collaborate more efficiently, and deliver more value with dramatically less effort. That’s why many of the world’s largest organizations trust Dynatrace®️ to modernize and automate cloud operations, release better software faster, and deliver unrivalled digital experiences.

You will love the benefits of selling Dynatrace

• We are a market share leader & an 11x magic quadrant leader
• We invest more in R&D than some of our competitors’ total revenue, assuring market-leading customer value and quick adoption
• Enjoy our culture of excellence with competitive compensation packages that recognize and reward greatness
• Working with the largest of the Cloud players like AWS, Azure, Pivotal and Google Cloud allows our customers to have the best of 3rd Generation Monitoring in the world. Not to mention we’re fully automated from the start, providing the most advanced solution leveraging our AI machine learning technology

Job Description

Reporting to the Directory of Corporate Security, the Security Analyst / Researcher provides technology leadership in the areas of network, infrastructure, and application penetration testing.  The Information Security Analyst / Research will perform Red Team activities against Dynatrace enterprise infrastructure and business applications.  Additionally, provides a cyber secure environment and security posture that fosters a high-trust relationship between Dynatrace, its employees, partners, and customers.

This role will be responsible for executing strategies and ensuring organizational and client IT security expectations are being satisfied. There will be an expectation of collaborating with various cross organizational teams to identify the approach, deliverables, schedule, and tools to deliver solutions within established constraints.

• Conduct penetration testing against Dynatrace’s network, infrastructure, and business applications.
• As a result of penetration testing activities create reports for management and work with other security team members to remediate identified findings and vulnerabilities.
• Review Dynatrace vendor’s security posture to ensure they meet Dynatrace requirements.
• Work with third-party security vendor, ensure they have high quality responses and review all RFI responses for accuracy.  Ensure security controls and question bank are updated and accurate.  
• Uncover, categorize, track and close security loopholes to maintain a secure environment.
• Maintain and validate security evidence repository with required documentation for compliance with security policies and audit requests.
• Manage and track remediation activities discovered through vulnerability management and scanning tools.  Ensure vulnerability management policy is followed.
• Generate dashboard and scorecards to articulate the current security posture and threat level.
• Examine and respond to reported security incidents and phishing attempts, determining the root cause, and escalating as needed.
• Become subject matter expert (SME) and make recommendations for improvements in security monitoring and compliance tools such as SIEM, Scanning Tools, Firewalls, Microsoft E5 Security Suite, etc.
• Develop and deploy pragmatic solutions, practices and procedures to ensure Dynatrace meets internal and customer security requirements. 
• Provide operational efficiency within the security team by providing and analyzing key metrics, performance indicators and threat assessments in accordance with security policies and procedures.
• Reduce time to complete customer security RFIs while improving accuracy and quality of responses.
• Obtain 100% compliance with IT security awareness policy both annually and for new hire training within the specified training windows.
• Maintain SOC2 Type 2 attestation on an annual basis, pursue and facilitate additional certifications as required by business (FedRAMP, ISO 27002:2013, etc.).

Location: This position can be remote. You must reside in the Central Time Zone or Eastern Time Zone within the U.S.A. 

Qualifications

Minimum Requirements

• A minimum of 5 years of IT security experience, preferably 7-10 years of experience.
• At least 2 years of conducted network, infrastructure, and application penetration testing.
• Bachelor’s Degree or a combination of education and/or experience may be considered in l