Threat Researcher
Socket · Remote · United States ·
COMPENSATION
$126k – $170k
Listed on the employer's job board (Ashby)
- Fully remote role
- Threat intelligence focus
- Malware analysis
- Automation tooling
- Senior level position
Join the Threat Intelligence Team at Socket to tackle emerging threats in open source ecosystems. You will leverage AI-based scanners and build custom tools to streamline malware analysis, protecting developers from malicious packages and extensions.
This hands-on position requires turning manual insights into scalable, real-time defenses. You will partner with engineering to integrate research into the core product while tracking advanced persistent threats and their tactics.
What you'll do
- Analyze unique daily threats to maintain high security standards
- Author technical blog posts on malicious code and campaigns
- Build automated scripts to streamline malware analysis workflows
- Integrate research findings into the core product for real-time protection
- Monitor GitHub and GitLab for emerging malicious campaigns
- Track APT adversaries and characterize their tactics and infrastructure
What you'll need
- 3+ years of experience in security operations or related field
- Master’s degree in computer science or equivalent practical experience
- Background in incident response, forensics, or reverse engineering
- Proven ability to build tools for automation and threat hunting
- Strong communication skills for assessing threat impact
- Passion for open source software and code analysis
Nice to have
- Familiarity with TypeScript or JavaScript ecosystems
- Experience using LLMs or AI tools for threat detection
Stack
- TypeScript
- JavaScript
- AI-based scanners
- GitHub
- GitLab
How you'll work
- Remote-first company culture
- Quarterly team off-sites
What you get
- Market competitive salary bands
- Meaningful equity program
- Comprehensive health benefits with 99% coverage
- Flexible time-off and winter shutdown
- Paid parental leave