Vulnerability Patch Engineer

Socket; United States; Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Equity program

Health benefits

Remote-first

Vacation policy

Parental leave

Job summary

Socket in the United States seeks a software engineer to help build and scale patching infrastructure that delivers secure, vetted open source packages to developers worldwide. You’ll patch critical vulnerabilities and create systems to sustain the entire ecosystem’s security.

You’ll work across Node.js/JavaScript tooling, develop automated vulnerability detection and patch creation workflows, and deliver APIs and integrations for certified packages in a remote-first setting.

Qualifications

• 3+ years of software engineering experience with production systems.
• Strong proficiency in Node.js, JavaScript, and TypeScript.
• Experience building and scaling APIs and data processing pipelines.

Responsibilities

• Master Socket workflows, tools, and patching processes.
• Lead patching efforts for high-impact vulnerabilities across npm packages.
• Scale patch production to dozens or hundreds of patches per week.
• Help select and prioritize high-value patches based on ecosystem impact.
• Build and improve automated patching infrastructure and tooling.
• Design and implement scalable patch generation and delivery systems.

Skills

Node.js

JavaScript

TypeScript

APIs

CI/CD

Testing

Security concepts

Open source

Tools

npm

yarn

pnpm

CI/CD tooling

Job description

Socket in the United States seeks a software engineer to help build and scale patching infrastructure that delivers secure, vetted open source packages to developers worldwide. You’ll patch critical vulnerabilities and create systems to sustain the entire ecosystem’s security.

You’ll work across Node.js/JavaScript tooling, develop automated vulnerability detection and patch creation workflows, and deliver APIs and integrations for certified packages in a remote-first setting.