Remote opportunity at
SocketVulnerability Research Software Engineer
Socket is seeking a Vulnerability Research Software Engineer to join its remote-first team on a full-time basis, offering a salary between USD 110,000 and 170,000 per…
Career Tools
About This Role
Socket is seeking a Vulnerability Research Software Engineer to join its remote-first team on a full-time basis, offering a salary between USD 110,000 and 170,000 per year. The company builds supply chain security solutions that help thousands of organizations and developers audit and manage open-source code efficiently. Founded by Feross Aboukhadijeh, Socket has secured USD 125M in funding from leading investors. In this capacity, you will focus on developing and…
Job Description
Socket is seeking a Vulnerability Research Software Engineer to join its remote-first team on a full-time basis, offering a salary between USD 110,000 and 170,000 per year. The company builds supply chain security solutions that help thousands of organizations and developers audit and manage open-source code efficiently. Founded by Feross Aboukhadijeh, Socket has secured USD 125M in funding from leading investors.
In this capacity, you will focus on developing and scaling patching infrastructure to deliver vetted packages to a global developer audience. You will work extensively in Rust and Unix environments, handle complex command-line interface challenges, and collaborate with security researchers to address critical vulnerabilities. The role requires strong software engineering capabilities combined with an interest in open-source ecosystem security. As an early team member, you will directly influence how the technology scales and help secure software supply chains for millions of users worldwide.
Responsibilities
- Learn and utilize Socket workflows, tools, and patching processes
- Develop and maintain command-line interface tooling for customer environments
- Implement package-manager integrations while managing edge cases specific to ecosystems
- Translate dependency and vulnerability workflows into reliable interfaces for developers
- Troubleshoot and debug implementation challenges within Unix-based operating environments
- Collaborate with the patch team to scope tasks, resolve issues, and release practical enhancements
- Contribute to frontend features using JavaScript, React, and TypeScript
- Scale patch creation to produce dozens or hundreds of patches every week
- Construct and enhance automated patching infrastructure, APIs, and data processing pipelines
- Design quality assurance and testing tooling for patches
- Partner with security researchers to comprehend and remediate critical vulnerabilities
Requirements
- At least three years of professional software engineering experience working with production systems
- Strong proficiency in Rust and Unix or Linux environments
- Solid working knowledge of Node.js, JavaScript, and TypeScript
- Familiarity with package managers including npm, yarn, and pnpm within the JavaScript ecosystem
- Comprehension of software security principles and vulnerability management
- Experience in designing and scaling application programming interfaces and data pipelines
- Familiarity with CI/CD, automated testing, and deployment platforms
Qualifications
- Experience utilizing security tools, patch management, or vulnerability scanners
- Understanding of software supply chain security issues
- Exposure to alternative package ecosystems such as Python or Go
- Prior contributions to open source projects or experience maintaining packages
- Background in security engineering or DevSecOps
- Experience working with high-throughput data processing systems
Core Skills
Benefits
- Market competitive salary bands
- Meaningful equity program
- Comprehensive health benefits with ninety-nine percent coverage for employees and their families
- Flexible time off, paid holidays, and a winter shutdown period
- Paid parental leave
- Remote-first work environment featuring quarterly team off-sites
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes, this is a remote-first role that includes quarterly team off-sites.
What is the salary range for this role?
The salary for this position is between USD 110,000 and 170,000 per year, accompanied by a meaningful equity program and comprehensive health benefits.
What technical background is required?
Applicants must have at least three years of software engineering experience with production systems, along with strong proficiency in Rust, Unix or Linux environments, and Node.js, JavaScript, and TypeScript.
What does the interview process involve?
The interview process includes an informational talk with a talent team member, hiring manager and peer interviews, a take-home problem with internal review and live discussion, a debrief, a final interview with the founder, and reference checks.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
