Security software companies · Open source supply chain security
Socket
About Socket
Socket scans npm, PyPI and other package ecosystems for malware, typosquats and suspicious behavior hidden in dependencies, going well beyond lists of known CVEs. Its small engineering team has two research roles open on 11 Nov 2026, a vulnerability research engineer and a threat researcher, a good fit for people who like reading package code and tracking supply chain attackers. Both postings state pay.
Platform-stated
, CyberJobs.cc shows 2 security openings at Socket, 2 of which name a salary range.
Socket security openings
Read 11 Nov 2026, 15:57 UTC- $110,000–$170,000/yr
Threat Researcher (opens the job details)
Threat Intel & Research · Remote· 10mo agoDetails
$126,000–$170,000/yr
Some links on AITraining.jobs are referral links. If you sign up through one, AITraining.jobs may earn a commission at no extra cost to you. It never changes what a platform pays you.
Socket jobs by country
Its open roles that accept applicants in each country.
Hear first when Socket posts a security role
We read Socket's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.
Working at Socket
Founded by open source maintainer Feross Aboukhadijeh, Socket is a privately held, venture-backed company. Its security postings state Stated per posting (platform-stated).
2 security roles open at the last read2 open roles at Socket, confirmed on its careers system 11 Nov 2026.
Home-based US roles at a venture-backed startup.
One role is remote and the other is based in the United States.
Honest catches
- The salary note here is platform-stated rather than read from current postings, so use it as a guide, not as an offer.
Salaries at Socket
Platform-stated · as of 2026-11-11Recorded salary note, platform-stated, dated 2026-11-11
Both postings give a US yearly range, together spanning $110,000 to $170,000.
2 of its 2 open roles give a salary, not enough to call any figure typical of Socket, so the note above stands. By specialty:
| Kind of work | Open roles | Rates stated | Highest rate |
|---|---|---|---|
| Offensive Security | 1 | $110k–$170k/hr1 rate | $170k/yr |
| Threat Intel & Research | 1 | $126k–$170k/hr1 rate | $170k/yr |
Specialties Socket hires in
Open a specialty for its day-to-day work, the other employers hiring for it and its salary band.
Moving into security? The career guides explain each specialty, and the salary pages set employers side by side.
From the forum
Ask the people doing Socket work what only they can tell you.
Socket: common questions
What salary does Socket offer security staff?
Stated per posting. Both postings give a US yearly range, together spanning $110,000 to $170,000.
What sort of company is Socket?
Founded by open source maintainer Feross Aboukhadijeh, Socket is a privately held, venture-backed company.
What is it like to work in security at Socket?
Its security postings state Stated per posting (platform-stated). As a security vendor, it hires both defenders for its own estate and specialists who build and sell the product.
What kind of employment are Socket's security roles?
Home-based US roles at a venture-backed startup.
Where are Socket's security jobs based?
One role is remote and the other is based in the United States.
Other employers to weigh up
Horizon3.ai sells NodeZero, which runs autonomous penetration tests against real networks; its engineers build that attack capability and research the threats it emulates.
$219k–$305k/yrTypical pay, live
Semgrep makes fast, rule-based static analysis and supply chain scanning; its open security role leads engineers building supply chain security.
Not stated in its postingsPlatform-stated
Material Security protects Google Workspace and Microsoft 365 email, files and accounts; its enterprise security engineer secures the company's own corporate environment.
Not stated in its postingsPlatform-stated
Sells backup combined with anti-malware and endpoint security, mostly through service providers; it is hiring a product security lead and cyber defense staff.
$194k–$292k/yrTypical pay, liveOrdered by what applying is worth, lifted by a referral boost for the platforms that pay us a referral fee; it never changes what a platform pays you.
Recruiting security staff like Socket's? We source the candidates (you make the hire).