Vulnerability Research Software Engineer

Socket
Canada, United States, San Francisco
Workplace: RemoteFull timeUSD 110,000 - 170,000 annuallyFunction: Software EngineeringExperience: 3+ yearsSkills: ["Ownership","Customer obsession","Urgency","Rigorous thinking","Constructive collaboration"]

Build and scale Socket’s patching infrastructure to deliver secure, vetted packages for the open source ecosystem. You’ll create and maintain CLI tooling and package-manager integrations, address Unix edge cases across npm/yarn/pnpm, and translate vulnerability workflows into reliable developer interfaces. Work with the patch team and security researchers to patch critical vulnerabilities, improve patch quality via automation and testing, and ship APIs and integrations that deliver certified packages.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Socket
Socket
2 days ago

Vulnerability Research Software Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 2 hours agoStatus: Live

Job Summary

Build and scale Socket’s patching infrastructure to deliver secure, vetted packages for the open source ecosystem. You’ll create and maintain CLI tooling and package-manager integrations, address Unix edge cases across npm/yarn/pnpm, and translate vulnerability workflows into reliable developer interfaces. Work with the patch team and security researchers to patch critical vulnerabilities, improve patch quality via automation and testing, and ship APIs and integrations that deliver certified packages.
Location: Canada, United States, San Francisco
Workplace: Remote
Employment Type: Full time
Job Function: Software Engineering
Seniority: Mid level

Key Responsibilities

  • •Master Socket workflows and patching processes.
  • •Build and maintain CLI tooling and package-manager integrations across customer environments.
  • •Create developer-facing interfaces for dependency and vulnerability remediation workflows.
  • •Debug and improve implementations across Unix-based environments, handling ecosystem-specific edge cases.
  • •Build and scale automated patching infrastructure, QA/testing tooling, and APIs that deliver certified packages.

Pay and Benefits

Salary: USD 110,000 - 170,000 annually
Equity and Bonus:Equity
Perks:Health InsuranceEquityParental LeaveRemote Work

Key Requirements

  • •3+ years of software engineering experience building production systems.
  • •Strong proficiency in Rust and Unix/Linux environments.
  • •Proficiency in Node.js, JavaScript, and TypeScript.
  • •Experience with package managers (npm, yarn, pnpm) and the JavaScript ecosystem.
  • •Understanding of software security concepts and vulnerability management, including building and scaling APIs and data processing pipelines.
Experience:3+ yearsOpen sourceDevSecOpsSecurity engineering
Skills:OwnershipCustomer obsessionUrgencyRigorous thinkingConstructive collaboration
Tech Stack:RustUnixLinuxNode.jsJavaScriptTypeScriptReactNpmYarnPnpmAPIsCI/CD

Company Brief

Socket
Develops developer-focused tools and services to improve JavaScript/TypeScript package management, dependency workflows, and developer productivity for teams building modern web applications.
Industry: Developer Tools
Website