Skip to main content

Socket

Vulnerability Research Software Engineer

Remote (Remote)$110k–$170kfulltimemidAdded today

About this role

Socket seeks a Vulnerability Research Software Engineer to build and scale patching infrastructure for open source security. You'll develop CLI tools, package manager integrations, and automated systems that deliver secure patches to developers worldwide, combining deep Rust and Unix expertise with JavaScript/TypeScript frontend work.

What you'll do

  • Build and maintain CLI tooling and patch infrastructure used across customer environments
  • Implement package manager integrations and handle ecosystem-specific edge cases across npm, yarn, pnpm, and other systems
  • Debug and troubleshoot implementation issues across Unix-based environments
  • Develop APIs and integrations to deliver certified, patched packages at scale
  • Collaborate with security researchers to scope vulnerabilities, build patches, and scale production to hundreds per week
  • Create tooling for patch quality assurance, testing, and vulnerability management workflows

What they're looking for

  • Rust programming and Unix/Linux system administration
  • Node.js, JavaScript, and TypeScript
  • Package managers (npm, yarn, pnpm) and JavaScript ecosystem knowledge
  • Software security concepts and vulnerability management
  • API design and data processing pipeline development
  • Automated testing, CI/CD, and deployment systems
  • CLI tool development and troubleshooting
  • Supply chain security fundamentals
Apply with Autofill

Opens the application — the Jobs AI extension fills it for you. Set up autofill

Opens the official application on the employer’s site. No login required.

Socket

Socket builds supply chain security solutions and web applications focused on securing open source packages and developer tools. The company is hiring Sales Engineers to support customers across SMB and enterprise segments, Software Engineers to develop its web platform, and Vulnerability Research Engineers to enhance its patching and security systems.

View all jobs at Socket

Likely interview questions

  • Walk us through your experience building production systems in Rust—what's the most complex project you've shipped?
  • Describe how you'd approach scoping and implementing a patch for a critical vulnerability across multiple package managers.
Unlock all 7 questions free — and practice them live →