Vulnerability Research Engineer: Open-Source Patch Lead

Socket; Austria; Remote; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Salary bands

Equity program

Health benefits

Flexible time-off

Parental leave

Remote-first

Job summary

Socket is hiring a software engineer to build and scale patching infrastructure that delivers secure, vetted packages to developers worldwide. You will tackle automated patching, vulnerability detection, and API-driven delivery, contributing to a safer open source ecosystem.

As an early member of the team, you will influence the technical roadmap and collaborate across the JavaScript ecosystem and beyond, shaping how patches are produced and delivered at scale.

Qualifications

• 3+ years of software engineering experience with production systems.
• Proficiency in Node.js, JavaScript, and TypeScript.
• Experience with package managers (npm, yarn, pnpm) and the JavaScript ecosystem.
• Understanding of software security concepts and vulnerability management.
• Experience building and scaling APIs and data processing pipelines.
• Familiarity with automated testing, CI/CD, and deployment systems.

Responsibilities

• Master Socket workflows, tools, and patching processes.
• Lead patching efforts for high-impact vulnerabilities across npm packages.
• Scale patch production to dozens or hundreds of patches per week.
• Help select and prioritize high-value patches.
• Provide technical input on patch prioritization based on ecosystem and customer impact.
• Build and improve automated patching infrastructure and tooling.
• Design and implement scalable patch generation and delivery systems.
• Develop automated vulnerability detection and patch creation workflows.
• Build APIs and integrations to deliver certified packages.
• Create tooling for patch quality assurance and testing.
• Work with security researchers to understand and patch critical vulnerabilities.
• Help shape the technical roadmap for expansion.
• Give developers quick, safe remediation options for widely-used packages.
• Help secure the software supply chain for millions of developers.

Skills

Node.js

JavaScript

TypeScript

APIs

CI/CD

Testing

Security concepts

Data processing

Tools

npm

yarn

pnpm

Job description

Socket is hiring a software engineer to build and scale patching infrastructure that delivers secure, vetted packages to developers worldwide. You will tackle automated patching, vulnerability detection, and API-driven delivery, contributing to a safer open source ecosystem.

As an early member of the team, you will influence the technical roadmap and collaborate across the JavaScript ecosystem and beyond, shaping how patches are produced and delivered at scale.