Remote opportunity at
SocketThreat Researcher
Socket is seeking a Threat Researcher to join the Threat Intelligence Team on a full-time, remote basis. Socket provides an open-source security platform designed to help…
Career Tools
About This Role
Socket is seeking a Threat Researcher to join the Threat Intelligence Team on a full-time, remote basis. Socket provides an open-source security platform designed to help developers and organizations safely discover, evaluate, and manage third-party code. Backed by prominent investors and founded by Feross Aboukhadijeh, the company protects numerous software teams worldwide. In this position, you will investigate software supply chain threats using proprietary artificial intelligence tools, develop automation scripts,…
Job Description
Socket is seeking a Threat Researcher to join the Threat Intelligence Team on a full-time, remote basis. Socket provides an open-source security platform designed to help developers and organizations safely discover, evaluate, and manage third-party code. Backed by prominent investors and founded by Feross Aboukhadijeh, the company protects numerous software teams worldwide.
In this position, you will investigate software supply chain threats using proprietary artificial intelligence tools, develop automation scripts, and build malware analysis utilities. The role involves tracking advanced persistent threat adversaries, publishing technical findings, and collaborating with engineering staff to translate manual threat discoveries into scalable product protections. This is a hands-on technical position suited for professionals with experience in threat intelligence and malware analysis.
Responsibilities
- Investigate multiple unique security threats daily to establish high industry benchmarks for supply chain protection.
- Write technical blog posts and deep research reports regarding malicious open-source packages, browser extensions, novel attack vectors, and broader campaign trends.
- Develop automated scripts and software tools to improve threat hunting, data gathering, and malware analysis pipelines.
- Collaborate with the engineering group to integrate research discoveries directly into core product defenses for real-time protection.
- Monitor package registries, browser extensions in Chrome and VS Code, and repositories like GitHub and GitLab for emerging malicious campaigns.
- Monitor advanced persistent threat adversaries by characterizing their techniques, tactics, procedures, infrastructure, and capabilities.
Requirements
- Possess at least three years of professional work experience.
- Demonstrate technical background across security operations fields including investigations, incident management, digital forensics, reverse engineering, malware analysis, threat hunting, and detection engineering.
- Exhibit strong communication abilities to evaluate the severity and impact of security threats.
- Show practical experience in creating tools for automation, threat hunting, and data collection.
- Maintain a strong passion for open-source software and coding.
Qualifications
- Hold a master's degree in computer science, engineering, or a related subject area, or have equivalent practical experience.
- Be familiar with TypeScript, JavaScript, or other programming languages and ecosystems protected by Socket.
- Possess experience using large language models or AI-driven tools for threat detection.
Core Skills
Benefits
- Market competitive salary ranging from USD 126,000 to 170,000 per year.
- Meaningful equity program.
- Comprehensive health benefits covering 99 percent for employees and their families.
- Flexible time off, paid holidays, and a winter shutdown period.
- Paid parental leave.
- Remote-first work environment featuring quarterly team off-sites.
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes, this role is remote-first with quarterly team off-sites.
What is the salary range for the Threat Researcher role?
The salary ranges from USD 126,000 to 170,000 per year, accompanied by a meaningful equity program.
What are the core experience requirements?
Applicants need a minimum of three years of professional work experience, a background in security operations areas like malware analysis or incident response, tool-building experience for automation, and strong communication skills.
How do I apply for this position?
The posting does not specify application instructions.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
