Remote Vulnerability Patch Engineer - Open Source Security

Socket; Oregon; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Market-competitive salary bands

Equity program

Comprehensive health benefits for you

Flexible time-off and holidays

Paid parental leave

Remote-first with quarterly team off‑s

Job summary

Socket is hiring to build and scale patching infrastructure that safely delivers vetted packages to developers worldwide. You will work at the forefront of supply chain security, creating patches for critical vulnerabilities and developing systems that help the open source ecosystem stay secure.

As an early member, you’ll influence scaling across the JavaScript ecosystem and beyond. You’ll lead patching initiatives, design automated workflows, and collaborate with researchers to remediate

Qualifications

• 3+ years of software engineering with production systems.
• Proficiency in Node.js, JavaScript, and TypeScript.
• Experience with npm, yarn, pnpm and JS ecosystem.

Responsibilities

• Lead patching efforts for high-impact vulnerabilities across npm packages.
• Scale patch production to dozens or hundreds of patches per week.
• Help select and prioritize high-value patches.
• Provide technical input on patch prioritization based on ecosystem and customer impact.
• Build and improve automated patching infrastructure and tooling.
• Design scalable patch generation and delivery systems.
• Develop automated vulnerability detection and patch creation workflows.
• Build APIs to deliver certified packages.
• Create tooling for patch QA and testing.
• Collaborate with security researchers to patch critical vulnerabilities.
• Shape the technical roadmap for expansion.
• Provide quick, safe remediation options for widely-used packages.

Skills

Node.js

JavaScript

TypeScript

Package managers (npm, yarn, pnpm)

Security concepts

APIs and data pipelines

CI/CD and testing

Tools

Open source tooling

DevSecOps tooling

Job description

Socket is hiring to build and scale patching infrastructure that safely delivers vetted packages to developers worldwide. You will work at the forefront of supply chain security, creating patches for critical vulnerabilities and developing systems that help the open source ecosystem stay secure.

As an early member, you’ll influence scaling across the JavaScript ecosystem and beyond. You’ll lead patching initiatives, design automated workflows, and collaborate with researchers to remediate