Vulnerability Research Engineer

Job not on LinkedIn

🕒 March 27

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

📚 Research Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SOCKET

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 1994

📡 Telecommunications

Telecommunications

SOCKET is a telecommunications company offering internet, phone, and television services to both residential and business customers. For residential customers, SOCKET provides straightforward service bundles with flat-rate pricing and local support, ensuring simplicity and ease with a single bill covering all services. For businesses, SOCKET offers a range of solutions from basic internet and phone services to advanced offerings like Hosted PBX and Dedicated Services, tailor-fit to meet different size and budget requirements. With a focus on transparent billing and no hidden fees, SOCKET distinguishes itself by providing reliable telecommunications solutions that cater to a diverse clientele.

📋 Description

• Master Socket workflows, tools, and patching processes • Lead patching efforts for high-impact vulnerabilities across npm packages • Scale patch production to dozens or hundreds of patches per week • Help select and prioritize high-value patches • Provide technical input on patch prioritization based on ecosystem and customer impact • Build and improve automated patching infrastructure and tooling • Design and implement scalable patch generation and delivery systems • Develop automated vulnerability detection and patch creation workflows • Build APIs and integrations to deliver certified packages • Create tooling for patch quality assurance and testing • Work with security researchers to understand and patch critical vulnerabilities • Help shape the technical roadmap for expansion • Give developers quick, safe remediation options for widely-used packages • Help secure the software supply chain for millions of developers

🎯 Requirements

• 3+ years of software engineering experience with production systems • Strong proficiency in Node.js, JavaScript, and TypeScript • Experience with package managers (npm, yarn, pnpm) and the JavaScript ecosystem • Understanding of software security concepts and vulnerability management • Experience building and scaling APIs and data processing pipelines • Familiarity with automated testing, CI/CD, and deployment systems • Experience with security tooling, vulnerability scanning, or patch management (preferred) • Knowledge of software supply chain security challenges (preferred) • Experience with other package ecosystems (Python, Go, Rust, etc.) (preferred) • Open source contributions or package maintenance experience (preferred) • Background in DevSecOps or security engineering (preferred) • Experience with high-throughput data processing systems (preferred)

🏖️ Benefits

• Market competitive salary bands • Meaningful equity program • Comprehensive health benefits for you and your family • Flexible time-off, holidays, and winter shutdown to rest & recharge • Paid parental leave • Remote-first, with quarterly team off-sites