Socket

Socket

Threat Researcher

AMER · Junior

Sponsorship not specifiedDetected 210 days ago
JavaScriptTypeScriptSwiftGitRESTLLMsCybersecuritySOC OperationsDetection EngineeringIncident ResponseFigmaSupply ChainResearchCommunication

About the role

  • Socket is looking for a Threat Researcher to join our growing Threat Intelligence Team.
  • You'll secure open source ecosystems, strengthen threat detection across multiple programming languages, and conduct research that helps protect developers and organizations worldwide.
  • This is a hands-on role for someone passionate about threat hunting, security research, automation, and turning insights into actionable defenses.

Responsibilities

  • Design and build automated scripts and tools to streamline malware analysis, enhancing our data collection, threat analysis, and threat hunting workflows.
  • Partner with our engineering team to integrate your research into our core product, turning manual insights into scalable, real-time protection.
  • Experience building tools for automation, data collection, and threat hunting.

Requirements

  • 3+ years of work experience and a master's degree in computer science, engineering, or a related field (or equivalent experience).
  • Excellent communication skills and the ability to assess the relevance and impact of threats.

Nice to have

  • Familiarity with TypeScript/JavaScript and/or other programming languages and ecosystems protected by Socket.
  • Experience leveraging LLMs or AI-based tools for threat detection.

Compensation

  • Market competitive salary bands

Benefits

  • Our benefits are crafted to support you and your family, so you can take care of what matters most and thrive in and outside of work.
  • Meaningful equity program
  • Comprehensive health benefits for you and your family (99% coverage)
  • Flexible time-off, holidays, and winter shutdown to rest & recharge
  • Paid parental leave

Company info

  • Socket helps devs and security teams ship faster by cutting out security busywork. Thousands of orgs use Socket to safely find, audit, and manage open source code. Our customers - from Anthropic to xAI, and Figma to Vercel - love Socket (just check out their tweets https://socket.dev/love to see for yourself!)
  • Founded by Feross Aboukhadijeh https://www.linkedin.com/in/feross/, a long-time open source maintainer with software downloaded over a billion times a month, Socket has raised $ https://socket.dev/blog/series-b125M in funding https://socket.dev/blog/series-c from top angels, operators, and security leaders.
  • Socket helps devs and security teams ship faster by cutting out security busywork.
  • Thousands of orgs use Socket to safely find, audit, and manage open source code.
  • Our customers - from Anthropic to xAI, and Figma to Vercel - love Socket (just check out their tweets https://socket.dev/love to see for yourself!)
  • We wear many hats and feel a strong sense of overall ownership of the company and we're non-territorial regarding our nominal domains.
  • We relentlessly prioritize the needs of our customers, striving to exceed their expectations and delight them at every interaction.
  • Are customer obsessed: We relentlessly prioritize the needs of our customers, striving to exceed their expectations and delight them at every interaction.

This listing is sourced directly from Socket's careers page and normalized into a canonical job model.