Socket
Staff Security Engineer
AMER · Staff+
Sponsorship not specifiedDetected 119 days ago
SwiftGCPCloud PlatformsRESTCybersecurityIncident ResponseComplianceFigmaCommunication
About the role
- We're hiring a Security Engineer to help define and scale our security program.
- This is an IC role with broad ownership across application security, infrastructure, corporate security, and detection engineering.
- Socket is a security company, and our internal security posture matters both for protecting the company and for the credibility of what we sell.
Responsibilities
- Own, cloud infrastructure hardening, operational security, and IT security.
- Write code and build tooling that makes the secure path the default path for engineers.
- Assess, prioritize, and drive the security roadmap.
- You'll develop a clear picture of where Socket's risks are and make steady progress against them.
- Build trust with engineering teams so that security feels like an enabler, not a blocker.
- You've owned security broadly at a growth-stage company, or you're a strong software engineer who's moved into security and is ready to own the function end-to-end.
Requirements
- You have the communication and teaching skills to make an entire engineering org care about security, not by blocking people, but by earning trust and making the secure path the easy path.
- When you can fix something directly, you do.
- You can ship production TypeScript.
Compensation
- Market competitive salary bands
Benefits
- Our benefits are crafted to support you and your family, so you can take care of what matters most and thrive in and outside of work.
- Meaningful equity program
- Comprehensive health benefits for you and your family (99% coverage)
- Flexible time-off, holidays, and winter shutdown to rest & recharge
- Paid parental leave
- You have breadth across security domains (AppSec, CloudSec, OpSec) and you're comfortable learning fast where gaps exist.
Company info
- Socket helps devs and security teams ship faster by cutting out security busywork. Thousands of orgs use Socket to safely find, audit, and manage open source code. Our customers - from Anthropic to xAI, and Figma to Vercel - love Socket (just check out their tweets https://socket.dev/love to see for yourself!)
- Founded by Feross Aboukhadijeh https://www.linkedin.com/in/feross/, a long-time open source maintainer with software downloaded over a billion times a month, Socket has raised $ https://socket.dev/blog/series-b125M in funding https://socket.dev/blog/series-c from top angels, operators, and security leaders.
- Socket helps devs and security teams ship faster by cutting out security busywork.
- Thousands of orgs use Socket to safely find, audit, and manage open source code.
- Our customers - from Anthropic to xAI, and Figma to Vercel - love Socket (just check out their tweets https://socket.dev/love to see for yourself!)
- full ownership of a critical function, a company with real traction, and a deeply relevant problem space.
- As Socket grows, so will the security function, and you'll shape what that looks like.
- We wear many hats and feel a strong sense of overall ownership of the company and we're non-territorial regarding our nominal domains.
- We relentlessly prioritize the needs of our customers, striving to exceed their expectations and delight them at every interaction.
- This role is a rare combination: full ownership of a critical function, a company with real traction, and a deeply relevant problem space.
- Maintain compliance and drive new certifications. Maintain our existing SOC 2 compliance. Drive new certifications (ISO 27001, etc.) as needed for enterprise customers.
- Are customer obsessed: We relentlessly prioritize the needs of our customers, striving to exceed their expectations and delight them at every interaction.
This listing is sourced directly from Socket's careers page and normalized into a canonical job model.