Vulnerability Research Engineer (Remote - Worldwide)

A fast-growing software security company that helps developers and security teams find, audit and manage third-party open source code is hiring a engineer to build and scale its patching infrastructure. The work centers on producing vetted fixes for serious vulnerabilities in widely used JavaScript packages and delivering them to developers at scale. The role is an early hire on the team, with real influence over the technical direction and how the platform expands across the JavaScript ecosystem and beyond.

What you'll do

• Lead patching work on high-impact vulnerabilities in npm packages and help set priorities based on ecosystem and customer impact
• Scale patch output toward dozens or hundreds of patches per week
• Design and build automated patch generation, vulnerability detection and delivery systems
• Build APIs and integrations that deliver certified packages to customers
• Create tooling for patch quality assurance and testing
• Partner with security researchers to understand and remediate critical issues

What you need

• 3+ years of software engineering experience on production systems
• Strong skills in Node.js, JavaScript and TypeScript
• Hands-on experience with npm, yarn, pnpm and the JavaScript package ecosystem
• Working knowledge of software security concepts and vulnerability management
• Experience building and scaling APIs and data processing pipelines, plus familiarity with automated testing, CI/CD and deployment
• Nice to have: security tooling or patch management experience, open source maintenance, experience with Python, Go or Rust ecosystems, or high-throughput data processing

Open to applicants anywhere in the world.

How to apply

Get the free i'llTip app to see the employer's details and apply. i'llTip's AI can tailor your résumé to this job, and you'll get alerts for similar roles.

Prefer the website? Continue on illtip.comOr get the app: Android · iPhone

🔔 Get new jobs like this first: join Tech & AI Jobs on Telegram · or get personal job alerts