Vulnerability Research Software Engineer

Job not on LinkedIn

🔥 3 minutes ago

🌐 United States, Canada – Remote

🇺🇸 United States – Remote 🇨🇦 Canada – Remote

💵 $110k - $170k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🧑‍💻 Full-stack Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 3%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SOCKET

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 1994

📡 Telecommunications

Telecommunications

SOCKET is a telecommunications company offering internet, phone, and television services to both residential and business customers. For residential customers, SOCKET provides straightforward service bundles with flat-rate pricing and local support, ensuring simplicity and ease with a single bill covering all services. For businesses, SOCKET offers a range of solutions from basic internet and phone services to advanced offerings like Hosted PBX and Dedicated Services, tailor-fit to meet different size and budget requirements. With a focus on transparent billing and no hidden fees, SOCKET distinguishes itself by providing reliable telecommunications solutions that cater to a diverse clientele.

📋 Description

• Master Socket workflows, tools, and patching processes • Build and maintain CLI tooling used in customer environments • Implement package-manager integrations and handle ecosystem-specific edge cases • Translate dependency and vulnerability workflows into reliable developer-facing interfaces • Debug implementation issues across Unix-based environments • Work closely with the patch team to scope work, troubleshoot problems, and ship practical improvements • Contribute to frontend experiences using JavaScript, React, and TypeScript • Scale patch production to dozens or hundreds of patches per week • Build and improve automated patching infrastructure and tooling • Build APIs and integrations to deliver certified packages • Create tooling for patch quality assurance and testing • Work with security researchers to understand and patch critical vulnerabilities • Give developers quick, safe remediation options for widely-used packages • Help secure the software supply chain for millions of developers

🎯 Requirements

• 3+ years of software engineering experience with production systems • Strong proficiency in Rust and Unix/Linux environments • Proficiency in Node.js, JavaScript, and TypeScript • Experience with package managers (npm, yarn, pnpm) and the JavaScript ecosystem • Understanding of software security concepts and vulnerability management • Experience building and scaling APIs and data processing pipelines • Familiarity with automated testing, CI/CD, and deployment systems • Experience with security tooling, vulnerability scanning, or patch management (preferred) • Knowledge of software supply chain security challenges (preferred) • Experience with other package ecosystems such as Python or Go (preferred) • Open source contributions or package maintenance experience (preferred) • Background in DevSecOps or security engineering (preferred) • Experience with high-throughput data processing systems (preferred)

🏖️ Benefits

• Meaningful equity program • Comprehensive health benefits for you and your family (99% coverage) • Flexible time-off, holidays, and winter shutdown • Paid parental leave • Remote-first work • Quarterly team off-sites