Vulnerability Research Engineer

About this role

As a Vulnerability Research Engineer at Socket, you'll contribute to enhancing supply chain security by developing and optimizing patching systems for open source packages. This role fuses technical expertise with community impact, focusing on delivering secure solutions for developers worldwide.

What you'll do

• Master patching processes and Socket tools
• Lead efforts for high-impact vulnerability patches
• Scale patch production to meet demand
• Prioritize high-value patches based on ecosystem needs
• Enhance automated patching infrastructure and tools
• Collaborate with security researchers on critical vulnerabilities

What they're looking for

• Proficiency in Node.js, JavaScript, and TypeScript
• Experience with package managers like npm and yarn
• Understanding of security concepts and vulnerability management
• API development and data processing pipeline skills
• Familiarity with CI/CD and automated testing
• Experience with security tooling and vulnerability scanning
• Open source contribution experience
• Background in DevSecOps or security engineering

Benefits

• Impact the open source ecosystem
• Work with a talented team
• Shape the company's technical roadmap
• Flexible work environment
• Opportunities for professional growth
• [Unknown]