Senior Threat Researcher - Open Source Security (Remote)

Jobicy; United States; Remote; USD 120,000 - 190,000; Full time

Benefits offered by this job

Market competitive salary bands

Meaningful equity program

Comprehensive health benefits for you

Flexible time-off, holidays

Paid parental leave

Remote-first, quarterly off-sites

Job summary

Socket is seeking a Threat Researcher to join its Threat Intelligence Team. You’ll tackle cutting-edge threats in the software supply chain, building tools to enhance malware analysis and automation. This hands‑on role demands threat hunting, research, and turning insights into defenses.

You’ll publish deep‑dive research, analyze campaigns, and collaborate with engineering to embed findings into our product for real‑time protection across package registries and browser extensions.

Qualifications

• 3+ years of work experience and a master’s degree in computer science, engineering, or a related field (or equivalent experience).
• Technical experience across security operations including investigations, incident response and management, digital forensics, malware analysis, reverse engineering, threat intelligence, threat hunting, and detection engineering.
• Excellent communication skills and the ability to assess the relevance and impact of threats.
• Experience building tools for automation, data collection, and threat hunting.
• Passion for open source and code.

Responsibilities

• Analyze numerous unique threats daily, maintaining a standard of quality that sets the industry benchmark for supply chain security.
• Author high‑impact technical blog posts on malicious open source code packages and extensions, and publish deep‑dive research on campaigns and threat actor profiles.
• Design and build automated scripts and tools to streamline malware analysis, enhancing data collection and threat hunting workflows.
• Partner with engineering to integrate research into the core product, turning insights into scalable, real-time protection.
• Leverage open source ecosystems to enhance security across registries, extensions, and monitor GitHub/GitLab for campaigns.
• Track APT adversaries, characterizing TTPs, capabilities, infrastructure, and campaigns.

Skills

Security operations

Investigation & incident response

Digital forensics

Malware analysis

Reverse engineering

Threat intelligence

Threat hunting

Detection engineering

Education

Master's degree in computer science, engineering, or related field

Job description

Socket is seeking a Threat Researcher to join its Threat Intelligence Team. You’ll tackle cutting-edge threats in the software supply chain, building tools to enhance malware analysis and automation. This hands‑on role demands threat hunting, research, and turning insights into defenses.

You’ll publish deep‑dive research, analyze campaigns, and collaborate with engineering to embed findings into our product for real‑time protection across package registries and browser extensions.