5 hours ago
Remote, United States +2 moreMid Level
H1B sponsor
Base Salary
$110k - $170k/yr
Responsibilities
- Build and maintain CLI tooling used in customer environments.
- Implement package-manager integrations and address ecosystem-specific edge cases.
- Translate dependency and vulnerability workflows into reliable developer-facing interfaces.
- Debug implementation issues across Unix-based environments.
- Build and improve automated patching infrastructure and tooling.
- Build APIs and integrations to deliver certified packages.
- Create tooling for patch quality assurance and testing.
- Scale patch production to dozens or hundreds of patches per week.
- Contribute to frontend experiences using JavaScript, React, and TypeScript.
- Work with security researchers to understand and patch critical vulnerabilities.
- Provide developers with fast, safe remediation options for widely used packages.
- Help secure the software supply chain for millions of developers.
Requirements
- At least 3 years of software engineering experience with production systems.
- Strong proficiency in Rust and Unix/Linux environments.
- Proficiency in Node.js, JavaScript, and TypeScript.
- Experience with npm, yarn, pnpm, and the JavaScript ecosystem.
- Understanding of software security concepts and vulnerability management.
- Experience building and scaling APIs and data processing pipelines.
- Familiarity with automated testing, CI/CD, and deployment systems.
- Preferred qualifications include experience with security tooling, vulnerability scanning, patch management, software supply-chain security, other package ecosystems such as Python and Go, open-source contributions or package maintenance, DevSecOps or security engineering, and high-throughput data processing systems.
Benefits
- Market-competitive salary bands and a meaningful equity program.
- Comprehensive health benefits for employees and families with 99% coverage.
- Flexible time off, holidays, and a winter shutdown.
- Paid parental leave.
- Remote-first work arrangement with quarterly team off-sites.
Tech Stack
About Socket
Socket builds a cybersecurity platform that detects malware and supply chain risks in open-source dependencies for engineering and security teams. The privately held company, founded in 2020 and based in San Francisco, offers tools for safely finding, auditing, and managing third-party packages. Customers include Anthropic, xAI, Figma, and Vercel.