Socket
Threat Researcher
$126K–$170K
United States · Remote · Full-time · Posted Dec 23, 2025
- Experience
- 3+ years of work experience.
- Education
- Master’s degree in computer science, engineering, or a related field (or equivalent experience).
About the job
Research and analyze software supply chain threats, build malware-analysis automation, and turn findings into scalable product defenses.
What you'll do
- Analyze threats and publish technical research on malicious packages, campaigns, threat actors, and attack vectors.
- Build automated tools and scripts for malware analysis, data collection, and threat hunting.
- Collaborate with engineering to integrate research into Socket’s product and monitor open source ecosystems for threats.
What they ask for
- Technical experience in several security areas, including investigations, incident response, forensics, malware analysis, reverse engineering, threat intelligence, threat hunting, and detection engineering.
- Experience building tools for automation, data collection, and threat hunting.
- Excellent communication skills and ability to assess threat relevance and impact.
- Passion for open source and code.
Nice to have
- Familiarity with TypeScript/JavaScript and/or other programming languages and ecosystems protected by Socket.
- Experience using LLMs or AI-based tools for threat detection.
Pay
$126K – $170K USD base salary
Tools
TypeScript/JavaScript, Chrome, VS Code, GitHub, GitLab
AI focus
Leverage Socket’s proprietary AI-based scanner; preferred experience includes using LLMs or AI-based tools for threat detection.
Model-written summary · the original posting is authoritative