Threat Researcher

A researcher on Socket's Threat Intelligence Team, working remotely in the US, who hunts malicious code across the software supply chain, using Socket's AI-based scanner and building tools that speed up malware analysis. The role is not entry level.

The researcher analyses many threats each day, publishes technical write-ups on malicious packages, extensions, campaigns and threat actors, watches package registries, Chrome and VS Code extensions and GitHub/GitLab for new campaigns, tracks APT tactics and infrastructure, and works with engineering to build findings into the product. Socket wants three or more years of experience and a master's degree or equivalent, broad security operations skills from incident response and forensics to reverse engineering and detection engineering, and experience building automation for threat hunting.