← All roles

Vulnerability Research Software Engineer

Socket· Engineering
Apply on company site
Remote, Canada, United States, San Francisco$110k - $170kFull-timePosted 4w ago

About the role

Role focused on building and scaling patching infrastructure for secure, vetted open-source packages. Emphasis on Rust and Unix environments, CLI tooling, package-manager integrations, and collaboration with security researchers to patch critical vulnerabilities. Early team member with opportunities to shape scaling and impact across the ecosystem.

Responsibilities

  • Master Socket workflows, tools, and patching processes
  • Build and maintain CLI tooling used in customer environments.
  • Implement package-manager integrations and handle ecosystem-specific edge cases.
  • Translate dependency and vulnerability workflows into reliable developer-facing interfaces.
  • Debug implementation issues across Unix-based environments.
  • Work closely with the patch team to scope work, troubleshoot problems, and ship practical improvements.
  • Contribute to frontend experiences using JavaScript, React, and TypeScript.
  • Scale patch production to dozens or hundreds of patches per week
  • Build and improve automated patching infrastructure and tooling
  • Build APIs and integrations to deliver certified packages
  • Create tooling for patch quality assurance and testing
  • Work with security researchers to understand and patch critical vulnerabilities
  • Give developers quick, safe remediation options for widely-used packages
  • Help secure the software supply chain for millions of developers

Qualifications

  • 3+ years of software engineering experience with production systems
  • Strong proficiency in Rust and Unix/Linux environments
  • Proficiency in Node.js, JavaScript, and TypeScript
  • Experience with package managers (npm, yarn, pnpm) and the JavaScript ecosystem
  • Understanding of software security concepts and vulnerability management
  • Experience building and scaling APIs and data processing pipelines
  • Familiarity with automated testing, CI/CD, and deployment systems

Skills

Required:RustUnix/LinuxJavaScript/TypeScriptPackage managers (npm, yarn, pnpm)

Benefits

  • Market competitive salary bands
  • Meaningful equity program
  • Comprehensive health benefits for you and your family (99% coverage)
  • Flexible time-off, holidays, and winter shutdown to rest & recharge
  • Paid parental leave
  • Remote-first, with quarterly team off-sites
Last updated Sep 23, 2026. Interested? Apply on the company site.

About Socket

Company profileWebsite

More open roles at Socket