11 months ago
USA (city not specified)Mid Level / Senior
H1B sponsor
Base Salary
$126k - $170k/yr
Responsibilities
- Analyze numerous unique threats daily to set industry benchmarks for supply chain security.
- Author high-impact technical blog posts on malicious open source code and publish deep-dive research on threats.
- Design and build automated scripts and tools to streamline malware analysis.
- Collaborate with engineering to integrate research into core products for real-time protection.
- Enhance security across package registries and monitor GitHub/GitLab for emerging threats.
- Track APT adversaries and characterize their tactics, techniques, and procedures.
Requirements
- 3+ years of experience and a master’s degree in computer science, engineering, or a related field.
- Technical experience in security operations, including investigations, incident response, and malware analysis.
- Excellent communication skills to assess the relevance and impact of threats.
- Experience in building tools for automation and threat hunting.
- Passion for open source and code.
- Familiarity with TypeScript/JavaScript is preferred.
Benefits
- Market competitive salary bands.
- Meaningful equity program.
- Comprehensive health benefits for you and your family.
- Flexible time-off, holidays, and winter shutdown.
- Paid parental leave.
- Remote-first work environment with quarterly team off-sites.
Tech Stack
Categories
About Socket
Socket builds a cybersecurity platform that detects malware and supply chain risks in open-source dependencies for engineering and security teams. The privately held company, founded in 2020 and based in San Francisco, offers tools for safely finding, auditing, and managing third-party packages. Customers include Anthropic, xAI, Figma, and Vercel.