← All roles

Threat Researcher

Socket· Engineering
Apply on company site
Remote$126k - $170kFull-timePosted 9mo ago

About the role

Threat Researcher to join Socket's Threat Intelligence Team to tackle cutting-edge threats in the software supply chain, leverage proprietary AI-based scanning, build tools for malware analysis, and translate research into actionable defenses.

Responsibilities

  • Analyze numerous unique threats daily, maintaining a standard of quality that sets the industry benchmark for supply chain security.
  • Author high-impact technical blog posts on malicious open source code packages and extensions, and publish deep-dive research on malicious campaigns, threat actor profiles, novel attack vectors, and ecosystem-wide trends.
  • Design and build automated scripts and tools to streamline malware analysis, enhancing data collection, threat analysis, and threat hunting workflows.
  • Partner with engineering to integrate research into core product, turning manual insights into scalable, real-time protection.
  • Leverage expertise in open source software ecosystems to enhance security across package registries, browser extensions (Chrome/VS Code), and monitor GitHub/GitLab for emerging malicious campaigns.
  • Track APT adversaries, characterizing TTPs, capabilities, infrastructure, and campaigns.

Qualifications

  • 3+ years of work experience and a master’s degree in computer science, engineering, or a related field (or equivalent experience).
  • Technical experience across investigations, incident response and management, digital forensics, malware analysis, reverse engineering, threat intelligence, threat hunting, and detection engineering.
  • Excellent communication skills and the ability to assess the relevance and impact of threats.
  • Experience building tools for automation, data collection, and threat hunting.
  • Passion for open source and code.

Skills

Required:Threat huntingMalware analysisOpen source ecosystemsAutomation toolingCommunication

Benefits

  • Market competitive salary bands
  • Meaningful equity program
  • Comprehensive health benefits for you and your family (99% coverage)
  • Flexible time-off, holidays, and winter shutdown to rest & recharge
  • Paid parental leave
  • Remote-first, with quarterly team off-sites
Last updated Aug 26, 2026. Interested? Apply on the company site.

About Socket

Company profileWebsite

More open roles at Socket