Vulnerability Research Engineer

Socket
United States
Workplace: RemoteFull timeFunction: Research & Scientific (R&D)Experience: 3+ yearsSkills: ["Communication","Problem-solving","Collaboration"]

Join Socket to build and scale patching infrastructure for secure, vetted open-source packages. You’ll lead patching for high-impact vulnerabilities in npm ecosystems, scale patch production, and shape the technical roadmap while working across JS tooling, security, and integration projects to secure the software supply chain for developers worldwide.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Socket
Socket
9 months ago

Vulnerability Research Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 17 hours agoStatus: Live

Job Summary

Join Socket to build and scale patching infrastructure for secure, vetted open-source packages. You’ll lead patching for high-impact vulnerabilities in npm ecosystems, scale patch production, and shape the technical roadmap while working across JS tooling, security, and integration projects to secure the software supply chain for developers worldwide.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Research & Scientific (R&D)

Key Responsibilities

  • •Lead patching efforts for high-impact vulnerabilities across npm packages
  • •Scale patch production to dozens or hundreds of patches per week
  • •Build and improve automated patching infrastructure and tooling
  • •Design and implement scalable patch generation and delivery systems
  • •Develop automated vulnerability detection and patch creation workflows

Pay and Benefits

Perks:Health InsuranceEquityRemote WorkPaid ParentalFlexible Time-off

Key Requirements

  • •3+ years of software engineering experience with production systems
  • •Strong proficiency in Node.js, JavaScript, and TypeScript
  • •Experience with package managers (npm, yarn, pnpm) and the JavaScript ecosystem
  • •Understanding of software security concepts and vulnerability management
  • •Experience building and scaling APIs and data processing pipelines
Experience:3+ yearsOpen sourceSecurityJavaScript
Skills:CommunicationProblem-solvingCollaboration
Languages:English
Tech Stack:Node.jsJavaScriptTypeScriptNpmYarnPnpmCI/CDAPIsData processing

Company Brief

Socket
Develops developer-focused tools and services to improve JavaScript/TypeScript package management, dependency workflows, and developer productivity for teams building modern web applications.
Industry: Developer Tools
Website