Security Engineer

About impact.com

impact.com is the world’s leading commerce partnership marketing platform, transforming the way businesses grow by enabling them to discover, manage, and scale partnerships across the entire customer journey. From affiliates and influencers to content publishers, brand ambassadors, and customer advocates, impact.com empowers brands to drive trusted, performance-based growth through authentic relationships. Its award-winning products—Performance (affiliate), Creator (influencer), and Advocate (customer referral)—unify every type of partner into one integrated platform. As consumers increasingly rely on recommendations from people and communities they trust, impact.com helps brands show up where it matters most. Today, over 5,000 global brands, including Walmart, Uber, Shopify, Lenovo, L’Oréal, and Fanatics, rely on impact.com to power more than 225,000 partnerships that deliver measurable business results.

Your Role at impact.com:

As an L2 Security Analyst, you move beyond the "what" and into the "how" and "why." You will handle escalated incidents that require deep technical dives and proactive measures. You are expected to be a self-starter who can manage complex security projects independently, specifically focusing on our SASE/SSE architecture and advanced Cloud environments.

What You'll Do:

• Advanced Investigation: Lead deep-dive forensics for escalated alerts from L1, determining the root cause and scope of breaches.

• Threat Hunting: Conduct proactive threat hunting missions across AWS and Google Cloud to find "living off the land" attackers.

• Infrastructure Security: Manage and optimize SASE/SSE policies to ensure secure access for our remote workforce.

• Secure SDLC: Partner with DevOps to integrate security scanning and best practices into the SDLC.

• AI Implementation: Lead the implementation of AI/Machine Learning models for predictive threat detection and behavioral analysis.

What You Bring:

• Experience: 2-5 + years of dedicated experience in a SOC or Incident Response role.

• Cloud Mastery: Proven experience securing and auditing Google Cloud and AWS environments.

• Advanced Tooling: Expertise in configuring SIEM correlation rules and fine-tuning AV/EDR policies to reduce false positives.

• Independence: Proven ability to work independently, managing long-term security projects with minimal supervision.

• Education: Knowledge of both Red Team (offensive) and Blue Team (defensive) methodologies to better anticipate adversary moves.

Benefits and Perks:

• Flexible Working: Our Responsible PTO policy means you can take the time off you need to rest and recharge. We're committed to a positive work-life balance and provide a flexible environment that allows you to be happy and fulfilled in both your career and your personal life.

• Health and Wellness: Your well-being is a priority. Our mental health and wellness benefit includes up to 12 fully covered therapy/coaching sessions per year, with additional dependent coverage. We also offer a monthly gym reimbursement policy to support your physical health.

• A Stake in Our Growth: We offer Restricted Stock Units (RSUs) as part of our total compensation, giving you a stake in the company's growth with a 3-year vesting schedule, pending Board approval.

• Investing in Your Growth: We’re committed to your continuous learning. Take advantage of our free Coursera subscription and our PXA courses.

• Parental Support: We offer a generous parental leave policy, 26 weeks of fully paid leave for the primary caregiver and 13 weeks fully paid leave for the secondary caregiver.

• Technology Financial Support: We provide a technology stipend to help you set up your home office and a monthly allowance to cover your internet expenses

impact.com is proud to be an equal opportunity workplace. All employees and applicants for employment shall be given fair treatment and equal employment opportunity regardless of their race, ethnicity or ancestry, color or caste, religion or belief, age, sex (including gender identity, gender reassignment, sexual orientation, pregnancy/maternity), national origin, weight, neurodivergence, disability, marital and civil partnership status, caregiving status, veteran status, genetic information, political affiliation, or other prohibited non-merit factors.