About the role
Socket catches malicious open source packages before they reach your build, counts Anthropic, xAI, Figma and Vercel among its customers, and was founded by Feross Aboukhadijeh, whose own packages are downloaded over a billion times a month. It has raised $125 million. This is its first dedicated support hire in the US.
Being the first means the shape of the job is partly yours to set, and the posting says so: the runbooks you write, the macros you build and the patterns you spot decide how Socket scales support afterwards. The daily work is genuinely technical rather than triage-and-escalate. It is digging into integration failures across Socket's GitHub App, CLI, API and CI/CD pipeline checks by reading logs, tracing webhook failures, inspecting JSON payloads and reproducing edge cases, then explaining scan results, manifest files and lockfile behaviour to developers and security stakeholders who want different answers. When something does go to engineering, it goes with repro steps, scan output, environment details and your own hypothesis attached.
Asks are 2+ years in technical support, support engineering or a TAM role at a B2B SaaS company, comfort in a terminal, and enough code to read a stack trace and write or tweak a basic Python or JavaScript script. Security or DevSecOps familiarity, meaning SCA tools, CVEs, SBOMs and supply chain risk, is a plus and not a requirement. Two practical notes: the hours are 8am to 5pm in your own US time zone, and there is a rotation covering weekends and holidays. Remote, US.
Skills
How to apply
Apply directly on the employer's application page. Your application goes straight to them.
Jobs like this
Republished listing
This opportunity was discovered on Socket's public careers page and is republished here for discovery purposes. Applications are handled by the employer.
If this is your role and you want it off the board, contact us.