Remote Vulnerability Research Software Engineer

Engg; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Market competitive salary bands

Meaningful equity program

Comprehensive health benefits for you

Remote-first, quarterly off-sites

Job summary

Socket is building and scaling patching infrastructure to deliver secure, vetted packages to developers worldwide. You’ll work on Rust-based systems, Unix environments, and CLI tooling, addressing edge cases across multiple package managers.

You’ll contribute to frontend experiences with JavaScript/TypeScript, scale patch production, and collaborate with security researchers to remediate critical vulnerabilities. Remote-first, with quarterly team off-sites.

Qualifications

• 3+ years of software engineering experience with production systems.
• Strong proficiency in Rust and Unix/Linux environments.
• Proficiency in Node.js, JavaScript, and TypeScript.
• Experience with package managers (npm, yarn, pnpm) and the JavaScript ecosystem.
• Understanding of software security concepts and vulnerability management.
• Experience building and scaling APIs and data processing pipelines.
• Familiarity with automated testing, CI/CD, and deployment systems.

Responsibilities

• Master Socket workflows, tools, and patching processes.
• Build and maintain CLI tooling used in customer environments.
• Implement package-manager integrations and handle ecosystem-specific edge cases.
• Translate dependency and vulnerability workflows into reliable developer-facing interfaces.
• Debug implementation issues across Unix-based environments.
• Work closely with the patch team to scope work, troubleshoot problems, and ship practical improvements.
• Contribute to frontend experiences using JavaScript, React, and TypeScript.
• Scale patch production to dozens or hundreds of patches per week.
• Build and improve automated patching infrastructure and tooling.
• Build APIs and integrations to deliver certified packages.
• Create tooling for patch quality assurance and testing.
• Work with security researchers to understand and patch critical vulnerabilities.
• Give developers quick, safe remediation options for widely-used packages.
• Help secure the software supply chain for millions of developers.

Skills

Rust

Unix/Linux

Node.js

JavaScript

TypeScript

APIs

Data processing

CI/CD

Security concepts

Tools

npm

yarn

pnpm

Job description

Socket is building and scaling patching infrastructure to deliver secure, vetted packages to developers worldwide. You’ll work on Rust-based systems, Unix environments, and CLI tooling, addressing edge cases across multiple package managers.

You’ll contribute to frontend experiences with JavaScript/TypeScript, scale patch production, and collaborate with security researchers to remediate critical vulnerabilities. Remote-first, with quarterly team off-sites.