Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Vulnerability Research Software Engineer

Home > Javascript/Typescript programming jobs

Vulnerability Research Software Engineer in USA

  • Remote

Responsibilities

  • Build and maintain CLI tooling used in customer environments.
  • Implement package-manager integrations and address ecosystem-specific edge cases.
  • Translate dependency and vulnerability workflows into reliable developer-facing interfaces.
  • Debug implementation issues across Unix-based environments.
  • Build and improve automated patching infrastructure and tooling.
  • Build APIs and integrations to deliver certified packages.
  • Create tooling for patch quality assurance and testing.
  • Scale patch production to dozens or hundreds of patches per week.
  • Contribute to frontend experiences using JavaScript, React, and TypeScript.
  • Work with security researchers to understand and patch critical vulnerabilities.
  • Provide developers with fast, safe remediation options for widely used packages.
  • Help secure the software supply chain for millions of developers.

Requirements

  • At least 3 years of software engineering experience with production systems.
  • Strong proficiency in Rust and Unix/Linux environments.
  • Proficiency in Node.js, JavaScript, and TypeScript.
  • Experience with npm, yarn, pnpm, and the JavaScript ecosystem.
  • Understanding of software security concepts and vulnerability management.
  • Experience building and scaling APIs and data processing pipelines.
  • Familiarity with automated testing, CI/CD, and deployment systems.
  • Preferred qualifications include experience with security tooling, vulnerability scanning, patch management, software supply-chain security, other package ecosystems such as Python and Go, open-source contributions or package maintenance, DevSecOps or security engineering, and high-throughput data processing systems.

Benefits

  • Market-competitive salary bands and a meaningful equity program.
  • Comprehensive health benefits for employees and families with 99% coverage.
  • Flexible time off, holidays, and a winter shutdown.
  • Paid parental leave.
  • Remote-first work arrangement with quarterly team off-sites.

Salary: $110k - $170k/yr

Socket

Socket builds a cybersecurity platform that detects malware and supply chain risks in open-source dependencies for engineering and security teams. The privately held company, founded in 2020 and based in San Francisco, offers tools for safely finding, auditing, and managing third-party packages. ...

Similar positions

Senior Full-Stack Engineer

  • Cohere
  • Full time
  • Remote
  • 09/22/2026
  • Salary: CAD 215,000 - 310,000
  • Worldwide

AI Engineer

  • Elicit
  • Full time
  • USA
  • 09/22/2026
  • Salary: $195k-$300k
  • Remote

Staff Software Engineer, Cloud Infrastructure

  • Altruist
  • Full time
  • USA
  • 09/22/2026
  • Salary: $181k - $265k/yr
  • Los Angeles, CA

Senior Staff Applied Research Software

  • Twilio
  • Full time
  • Remote
  • 09/22/2026
  • Salary: Competitive
  • India

Software Engineer III, Front End

  • Google
  • Full time
  • USA
  • 09/22/2026
  • Salary: $147k - $210k/yr
  • Mountain View, CA