Vulnerability Research Engineer

About This Opportunity

We are representing a confidential cybersecurity organization at the forefront of software supply chain security. Our client is building patching infrastructure that delivers secure, vetted packages to developers at some of the world's most innovative companies. This role offers the chance to make a meaningful impact on open source security while working on challenging technical problems at scale.

As a Vulnerability Research Engineer, you'll combine deep technical work with ecosystem-wide impact, helping millions of developers ship secure code faster. You'll be an early member of a growing team, shaping how vulnerability patching scales across multiple package ecosystems.

Responsibilities

• Lead patching efforts for high-impact vulnerabilities across npm packages, scaling production to dozens or hundreds of patches per week
• Build and improve automated patching infrastructure, including vulnerability detection and patch creation workflows
• Design and implement scalable patch generation and delivery systems with APIs and integrations
• Develop tooling for patch quality assurance, testing, and automated deployment
• Provide technical input on patch prioritization based on ecosystem and customer impact
• Collaborate with security researchers to understand and remediate critical vulnerabilities
• Help shape the technical roadmap for expansion into additional package ecosystems

What We're Looking For

Required qualifications:

• 3+ years of software engineering experience building and maintaining production systems
• Strong proficiency in Node.js, JavaScript, and TypeScript
• Experience with package managers (npm, yarn, pnpm) and the JavaScript ecosystem
• Understanding of software security concepts and vulnerability management
• Experience building and scaling APIs and data processing pipelines
• Familiarity with automated testing, CI/CD, and deployment systems

Preferred qualifications:

• Experience with security tooling, vulnerability scanning, or patch management
• Knowledge of software supply chain security challenges
• Experience with additional package ecosystems (Python, Go, Rust, etc.)
• Open source contributions or package maintenance experience
• Background in DevSecOps or security engineering
• Experience with high-throughput data processing systems

How We Work With You

When you apply through Get A Job.ai, our talent team will review your background and conduct an initial screening. If there's a mutual fit, we'll submit your profile to our client for consideration. The client's interview process includes a hiring manager conversation, a take-home technical problem with live review, and final interviews with leadership.

Important: Please apply only through Get A Job.ai. Do not contact the client directly, as we are managing this search exclusively.

Pay

Compensation details will be discussed during the screening process based on experience and qualifications. Our client offers market-competitive salary bands, meaningful equity, comprehensive health benefits (99% coverage), flexible time-off, paid parental leave, and a remote-first culture with quarterly team gatherings.

Equal Opportunity

Get A Job.ai is committed to creating a diverse and inclusive recruitment process. We welcome applications from candidates of all backgrounds and experiences.