Vulnerability Research Software Engineer

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Master the workflows, tools, and patching processes of Socket.

• Develop and sustain CLI tools utilized in customer environments.

• Implement integrations for package managers and manage edge cases specific to different ecosystems.

• Convert dependency and vulnerability workflows into dependable interfaces for developers.

• Troubleshoot implementation issues across Unix-based systems.

• Collaborate closely with the patch team to define tasks, resolve issues, and deliver practical enhancements.

• Contribute to frontend development using JavaScript, React, and TypeScript.

• Scale patch production to produce dozens or even hundreds of patches weekly.

• Develop and enhance automated patching infrastructure and tools.

• Create APIs and integrations to provide certified packages.

• Design tools for patch quality assurance and testing.

• Partner with security researchers to identify and address critical vulnerabilities.

• Provide developers with quick and safe remediation options for commonly used packages.

• Assist in securing the software supply chain for millions of developers.

⛳️ Requirements

• A minimum of 3 years of experience in software engineering focused on production systems.

• Strong expertise in Rust and Unix/Linux environments.

• Proficiency in Node.js, JavaScript, and TypeScript.

• Experience with package managers such as npm, yarn, and pnpm, along with the JavaScript ecosystem.

• A solid understanding of software security principles and vulnerability management.

• Experience in building and scaling APIs and data processing pipelines.

• Familiarity with automated testing, CI/CD, and deployment systems.

• Experience with security tools, vulnerability scanning, or patch management is preferred.

• Knowledge of challenges related to software supply chain security is preferred.

• Experience with other package ecosystems like Python or Go is preferred.

• Contributions to open source or experience in package maintenance is preferred.

• A background in DevSecOps or security engineering is preferred.

• Experience with high-throughput data processing systems is preferred.

🏝️ Benefits

• Meaningful equity program.

• Comprehensive health benefits for you and your family, covering 99% of costs.

• Flexible time-off policies, holidays, and winter shutdowns.

• Paid parental leave.

• Remote-first work culture.

• Quarterly team off-site events.