{"id":3218043,"url":"https://alion.io/job/socket-threat-researcher-2","title":"Threat Researcher","company":{"id":1775144,"name":"Socket","domain":"socket.io","url":"https://alion.io/company/socket-io","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_payroll_markers","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":126000,"max":170000,"currency":"USD","period":"year","gross":null,"usd_annual":170000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GitHub","optional":false},{"name":"GitLab","optional":false},{"name":"JavaScript","optional":false},{"name":"TypeScript","optional":false},{"name":"Anthropic","optional":true},{"name":"Figma","optional":true},{"name":"Vercel","optional":true}],"status":"live","first_seen_at":"2026-10-24T16:13:46Z","employer_posted_date":null,"last_verified_at":"2026-10-24T16:13:46Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"About Us\n\nSocket helps devs and security teams ship faster by cutting out security busywork. Thousands of orgs use Socket to safely find, audit, and manage open source code. Our customers - from Anthropic to xAI, and Figma to Vercel - love Socket (just check out their tweets to see for yourself!)\n\nFounded by Feross Aboukhadijeh, a long-time open source maintainer with software downloaded over a billion times a month, Socket has raised $125M in funding from top angels, operators, and security leaders.\n\nAbout the Role \n\nSocket is looking for a Threat Researcher to join our growing Threat Intelligence Team. In this role, you’ll tackle cutting-edge threats in the software supply chain, leveraging our proprietary AI-based scanner and building tools to enhance malware analysis. You’ll secure open source ecosystems, strengthen threat detection across multiple programming languages, and conduct research that helps protect developers and organizations worldwide. This is not an entry-level position. This is a hands-on role for someone passionate about threat hunting, security research, automation, and turning insights into actionable defenses.\n\nWhat You'll Do\n\nAnalyze numerous unique threats daily, maintaining a standard of quality that sets the industry benchmark for supply chain security.\n\nAuthor high-impact technical blog posts on malicious open source code packages and extensions, and publish deep-dive research pieces on malicious campaigns, threat actor profiles, novel attack vectors, and ecosystem-wide trends.\n\nDesign and build automated scripts and tools to streamline malware analysis, enhancing our data collection, threat analysis, and threat hunting workflows.\n\nPartner with our engineering team to integrate your research into our core product, turning manual insights into scalable, real-time protection.\n\nLeverage expertise in open source software ecosystems to enhance security across package registries, browser extensions (Chrome/VS Code), and proactively monitor GitHub/GitLab for emerging malicious campaigns.\n\nTrack APT (Advanced Persistent Threat) adversaries, characterizing various TTPs (Tactics, Techniques, and Procedures), capabilities, infrastructure, and campaigns.\n\nWhat You'll Bring\n\nRequired: \n\n3+ years of work experience and a master’s degree in computer science, engineering, or a related field (or equivalent experience).\n\nTechnical experience across several areas of security operations, including investigations, incident response and management, digital forensics, malware analysis, reverse engineering, threat intelligence, threat hunting, and detection engineering.\n\nExcellent communication skills and the ability to assess the relevance and impact of threats.\n\nExperience building tools for automation, data collection, and threat hunting.\n\nPassion for open source and code.\n\nPreferred: \n\nFamiliarity with TypeScript/JavaScript and/or other programming languages and ecosystems protected by Socket.\n\nExperience leveraging LLMs or AI-based tools for threat detection.\n\nHiring is a big decision on both sides. Read more about our Hiring Philosophy and how we approach the process at Socket.\n\nBenefits: Our benefits are crafted to support you and your family, so you can take care of what matters most and thrive in and outside of work. We offer:\n\nMarket competitive salary bands\n\nMeaningful equity program\n\nComprehensive health benefits for you and your family (99% coverage)\n\nFlexible time-off, holidays, and winter shutdown to rest & recharge\n\nPaid parental leave\n\nRemote-first, with quarterly team off-sites \n\nAt Socket, we\n\nPursue Excellence: We set ourselves apart by consistently delivering work of exceptional quality and distinction.\n\nMove with urgency and focus: We prioritize swift, decisive action.\n\nThink rigorously: We care about being right and it often takes reasoning from first principles to get there. We value alternative perspectives and have constructive discussions.\n\nTrust and amplify: We overtrust, always assume good intent, and give specific feedback to help each other improve.\n\nFeel a strong sense of ownership: We wear many hats and feel a strong sense of overall ownership of the company and we're non-territorial regarding our nominal domains.\n\nAre customer obsessed: We relentlessly prioritize the needs of our customers, striving to exceed their expectations and delight them at every interaction.","description_format":"text","description_chars":4385,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-25T00:23:00Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":25,"reasons":["seen:0","velocity","win:early","comp:junior"],"computed_at":"2026-10-25T05:49:26Z"},"pay":{"stated_usd_annual":170000,"is_top_pay":true},"html_url":"https://alion.io/job/socket-threat-researcher-2","json_url":"https://alion.io/job/socket-threat-researcher-2.json","meta":{"generated_at":"2026-10-25T10:37:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15207,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1775144},"rest":"https://alion.io/mcp/rest/get_company?id=1775144"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsocket-threat-researcher-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsocket-threat-researcher-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsocket-threat-researcher-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/socket-threat-researcher-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsocket-threat-researcher-2"}]}