Threat Researcher

The role

You will tackle software supply chain threats using a proprietary AI-based scanner and build tools for malware analysis. You will secure open source ecosystems and conduct research to protect developers and organizations.

What you will do

• Analyze numerous unique threats daily.
• Author technical blog posts on malicious open source code packages and extensions.
• Publish deep-dive research pieces on malicious campaigns, threat actor profiles, novel attack vectors, and ecosystem-wide trends.
• Design and build automated scripts and tools to streamline malware analysis.
• Partner with the engineering team to integrate research into the core product.
• Leverage expertise in open source software ecosystems to enhance security across package registries and browser extensions.
• Proactively monitor GitHub/GitLab for emerging malicious campaigns.
• Track APT adversaries, characterizing TTPs, capabilities, infrastructure, and campaigns.

Required qualifications

• 3+ years of work experience and a master’s degree in computer science, engineering, or a related field (or equivalent experience).
• Technical experience across several areas of security operations, including investigations, incident response and management, digital forensics, malware analysis, reverse engineering, threat intellige
• Excellent communication skills and the ability to assess the relevance and impact of threats.
• Experience building tools for automation, data collection, and threat hunting.
• Passion for open source and code.

Nice to have

• Familiarity with TypeScript/JavaScript and/or other programming languages and ecosystems protected by Socket.
• Experience leveraging LLMs or AI-based tools for threat detection.

Benefits

• Market competitive salary bands
• Meaningful equity program
• Comprehensive health benefits for you and your family (99% coverage)
• Flexible time-off, holidays, and winter shutdown
• Paid parental leave

About the company

Socket helps devs and security teams ship faster by cutting out security busywork. Thousands of orgs use Socket to safely find, audit, and manage open source code.