Latest Security Engineering jobs at Socket

Own Socket’s compliance program as an engineered system, leading SOC 2 Type II, ISO 27001, risk and vendor programs, automated evidence pipelines, and customer assurance. The role requires deep audit ownership, ISO 27001 experience, automation skills, and the ability to build and lead a compliance function.

Analyzes software supply chain threats using AI scanners, conducts malware analysis and threat hunting, builds automation tools, and integrates research into products to protect open source ecosystems. Requires 3+ years in security operations and master's degree.

Builds and scales automated patching infrastructure for high-impact vulnerabilities in npm packages, leads patch production, and develops detection workflows and APIs to secure the JavaScript open source ecosystem. Requires 3+ years engineering experience with Node.js, JS/TS, package managers, and security concepts.