Threat Analyst

Socket

22h

About The Position

Socket is looking for a Threat Analyst to join our growing security team. In this role, you’ll tackle cutting-edge threats in the software supply chain, leveraging our proprietary AI-based scanner and building tools to enhance malware analysis. You’ll secure open source ecosystems, strengthen threat detection across multiple programming languages, and conduct research that helps protect developers and organizations worldwide. This is a hands-on role for someone passionate about threat hunting, automation, and turning insights into actionable defenses.

Requirements

• 2+ years of work experience in a related field or a Bachelor’s Degree in Computer Science, Computer Engineering, Cyber Security, etc.
• Experience generating indicators of compromise (IoCs) and conducting threat hunting using signatures.
• Excellent communication skills and the ability to assess the relevance and impact of threats.
• Experience building tools for automation, data collection, and threat hunting.
• Passion for open-source and code.

Nice To Haves

• Familiarity with TypeScript/JavaScript
• Experience leveraging LLMs or AI-based tools for threat detection

Responsibilities

• Analyze over 100 unique threats daily, maintaining a standard of quality that sets the industry benchmark for supply chain security.
• Author high-impact technical blog posts on malicious packages and publish 2-3 deep-dive research pieces on threat actor profiles, novel attack vectors, and ecosystem-wide trends.
• Design and build automated scripts and tools to streamline malware analysis, enhancing our data collection, threat summarization, and hunting workflows.
• Partner with our engineering team to integrate your research into our core product, turning manual insights into scalable, real-time protection.
• Leverage deep expertise in untapped ecosystems to enhance security across NuGet, browser extensions (Chrome/VS Code), and proactively monitor GitHub/GitLab for emerging malicious campaigns.
• Represent Socket in the broader security community by uncovering and documenting the tactics of sophisticated threat actors.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 101-250 employees