Vulnerability Research Engineer • Mid-Level

Who you are

You have a strong background in vulnerability research and patching processes — you've worked on projects that required deep technical knowledge of security practices and tools. Your experience with JavaScript and Node.js allows you to effectively contribute to the development of automated patching infrastructure. You are passionate about supply chain security and understand the importance of maintaining a secure open source ecosystem.

You thrive in collaborative environments — you enjoy working with cross-functional teams to prioritize high-impact vulnerabilities and deliver solutions that benefit the community. Your ability to communicate complex technical concepts clearly makes you a valuable team member. You are proactive in seeking out opportunities to improve processes and tools, ensuring that the patching efforts are efficient and effective.

What you'll do

In this role, you will master Socket workflows and tools, leading patching efforts for high-impact vulnerabilities across npm packages. You will scale patch production to dozens or hundreds of patches per week, helping to select and prioritize high-value patches based on ecosystem and customer impact. Your technical input will be crucial in determining patch prioritization, ensuring that the most critical vulnerabilities are addressed promptly.

You will build and improve automated patching infrastructure and tooling, designing and implementing scalable patch generation and delivery systems. Your work will involve developing automated vulnerability detection and patch creation processes, contributing to the overall security of the open source ecosystem. As an early member of the Socket team, you will have the opportunity to shape how we scale this technology and make a meaningful impact on the community.

What we offer

At Socket, we foster a culture of ownership and collaboration, where every team member feels empowered to contribute to our mission. We prioritize customer needs and strive to exceed their expectations, creating a positive impact in the developer community. Join us to be part of a team that values innovation and security, and help us build a safer open source ecosystem.