Supply chain security built by open source maintainers: a remote-first team that hit a $1B valuation in 2026.
Socket has raised $125 million across four rounds and was valued at $1 billion in May 2026. The $4.6M seed in May 2022 came from Unusual Ventures, Village Global, South Park Commons and angels including former GitHub CEO Nat Friedman and Keybase co-founder Max Krohn. The $20M Series A in August 2023 was led by Andreessen Horowitz with Abstract Ventures, WndrCo and angels including Michael Ovitz, Arash Ferdowsi (Dropbox), Jawed Karim (YouTube), Aaron Levie (Box), Dylan Field (Figma), Guillermo Rauch (Vercel), Elad Gil and Julia and Kevin Hartz (Eventbrite). The $40M Series B in October 2024 was led by Abstract Ventures with a16z, Elad Gil, Dylan Field and WndrCo, plus angels Bret Taylor, Phil Venables, Tobias Lütke, Jerry Yang, Jeff Lawson, Ryan Dahl and Christina Cacioppo, at which point the company had 32 employees. In April 2025 Socket acquired Coana, a reachability analysis spinout from Aarhus University, and said revenue had tripled over the prior year; in April 2026 it acquired Secure Annex, a browser and IDE extension security startup. The $60M Series C on May 20, 2026 was led by Thrive Capital with a16z, Abstract Ventures, Elad Gil, Michael Ovitz, new investor Capital One Ventures and angels from Anthropic's Long Horizons team, at a $1 billion valuation and with a team of over 100 people.
Socket is a developer-first security platform that detects and blocks malicious and vulnerable open source packages before they reach a developer's laptop, a CI pipeline or production. Rather than matching against known vulnerability databases, it analyzes the actual behavior of packages across the major ecosystems (npm, PyPI, Maven, Go, NuGet, RubyGems and more; Feross says 19 in total) and flags typosquats, backdoors, obfuscated code and compromised maintainer accounts in real time. It ships as a GitHub app that comments on pull requests, a CLI, and Socket Firewall, which is free for everyone and blocks bad packages at install time. Since 2025 the platform also includes reachability analysis from the Coana acquisition, which filters out up to 80% of irrelevant CVEs, and since 2026 coverage of browser extensions, editor plug-ins, MCP servers and AI tools from the Secure Annex acquisition.
As of the May 2026 Series C, Socket protects more than 27,000 organizations (up from 7,500 in October 2024), 1.5 million repositories and 11.6 million commits a month, and blocks over 10,000 supply chain attacks a week. Customers include Anthropic, xAI, Replit, Cursor, Vercel, Figma, Gusto, Mercado Libre and Cribl. In March 2026 the team was first to flag the backdoor in Axios, a library downloaded over 100 million times a week, within six minutes of it hitting npm. The company was founded in 2020, launched publicly in May 2022, and in August 2026 became available through the AWS Security Hub Extended plan.
Feross Aboukhadijeh, Founder and CEO. Creator of WebTorrent (the first torrent client that runs in the browser, 2013), WebTorrent Desktop and StandardJS (2015), and maintainer of over 100 npm packages downloaded more than a billion times a month. Founded PeerCDN, a WebRTC peer-to-peer CDN, which Yahoo acquired in 2013; then a software engineer at Yahoo (2013 to 2015) after internships at Quora, Facebook and Intel. Served on the Node.js Foundation board and lectures CS 253 Web Security at Stanford, where he earned a B.S. in Computer Science (Systems, 2012) and an M.S. in Computer Science (Computer and Network Security, 2020).
Socket is a remote-first company headquartered in San Francisco that hires across the United States, Canada, the United Kingdom and Europe, with a research group in Aarhus, Denmark that joined through the Coana acquisition. Current engineering roles are open to the United States and Canada (one listing adds the United Kingdom), EMEA customer roles are based in the UK and Denmark, and a Social Media Manager role is open worldwide. Per LinkedIn in mid-2026, about 64% of the roughly 135 staff are in the United States, with Denmark and Canada next and single hires in Finland, France, Germany, the Netherlands, Poland, South Africa and Spain.
Describe your next role, cut the noise
Own patching infrastructure and CLI/package-manager integrations for open-source supply-chain security; 3+ years, Rust, Unix/Linux, Node.js, JavaScript, TypeScript, npm/yarn/pnpm, security concepts, APIs, data pipelines, CI/CD; bonus: security tooling, other ecosystems, DevSecOps; early team, equity.
Remote US or Canada; also lists San Francisco.
Own post-sale technical success for European enterprise users of open-source security tooling; travel as needed; 6+ years in technical customer-facing roles, 2+ years owning customer success, app security/DevSecOps, CI/CD, code reading, APIs/webhooks, package managers; bonus: SCA, open source
Remote in Europe; posting header names United Kingdom and description says must be located within Europe
Own SMB customer renewals, upsells, health checks, and adoption for a cybersecurity SaaS product; travel as needed; 5+ years in B2B SaaS customer success/renewals, cybersecurity industry experience, quota attainment, C-suite communication; early-stage, remote-first; equity
Remote in the United Kingdom or Denmark only
Lead and scale a team of Enterprise Technical Account Managers in a technical post-sales org; owns onboarding, adoption, customer health, gross retention, escalations on at-risk enterprise accounts, and post-sales operating systems like segmentation, health scoring, QBRs, playbooks, automation, and one-to-many programs; partners with AEs on enterprise renewals and feeds customer technical insights to product/engineering; must have 4+ years managing post-sales teams and 6+ years total in pre/post-sales in B2B SaaS; must have owned GRR/NRR/adoption targets and have background in security, developer tools, or adjacent technical products with understanding of SDLC and how developers/security teams work; required to step in as IC when needed and travel as needed; preferred: software supply chain security/AppSec/DevSecOps/open-source ecosystem experience, high-growth startup scaling, TAM charter ownership, and Vitally or similar CS platform experience
Remote US or Canada only
Own post-sales success for a portfolio of commercial customers as main technical advisor; lead onboarding and implementation for enterprise customers across CI/CD, build pipelines, IDEs, and internal tooling; act as frontline technical support without a separate support team, investigating integration/configuration/compatibility issues via logs and telemetry and escalating to Engineering; run discovery, architecture reviews, security posture assessments, workshops, office hours, and deep-dives to drive adoption; partner with AEs on upsells, renewals, and expansions while AEs own commercial outcomes; feed field intelligence back to Product and Engineering and build repeatable playbooks, scripts, automations, documentation, and internal tooling; requires 3 years in a technical customer-facing role plus 1+ year as dedicated customer point of contact focused on health checks/success; background in application security, DevSecOps, package managers/open-source ecosystems or Linux sysadmin/networking/firewalls/Docker; must be able to read code, work with CI/CD platforms, APIs/webhooks/SaaS integrations, package managers, and troubleshoot production issues; travel for customer/company meetings as needed; bonus: mid-market/commercial segment support, SCA/dependency/security scanning tools, one-to-many customer programs, open-source contributions
Remote US or Canada only
Own post-sale success for large enterprise accounts using a security/developer tool; main technical advisor and point of contact while AEs own renewals/expansion; lead technical onboarding and integrations across CI/CD, build pipelines, IDEs, and internal tooling; investigate integration/configuration/compatibility issues directly with customers via dedicated Slack channels using logs and telemetry, escalating to engineering as needed; run discovery, architecture reviews, security posture assessments, workshops, office hours, and deep-dives to drive adoption; feed field intelligence back to product/engineering and help build repeatable onboarding playbooks, scripts, automations, documentation, and internal tooling; requires 4+ years in a technical customer-facing role and 2+ years as a dedicated customer contact focused on health checks/success; background in application security, DevSecOps, package managers/open-source ecosystems or Linux systems administration, networking, firewalls, and Docker; must be able to read code and work with APIs/webhooks/SaaS integrations; willing to travel as needed; bonus: enterprise account complexity, SCA/dependency/security scanning tools, open-source contributions
Remote US or Canada
Lead and grow a team of Commercial Technical Account Managers in a technical post-sales org; owns adoption, customer health, and gross retention outcomes while AEs own commercial renewals; senior escalation owner for at-risk accounts; operationalize and improve segmentation, health scoring, lifecycle playbooks, QBR frameworks, automation, and one-to-many programs; feeds technical field intelligence to Product and Engineering; reports retention, adoption, and team health to leadership; requires 4+ years directly managing post-sales teams and 6+ years total in pre/post-sales B2B SaaS roles; must have owned GRR/NRR/adoption targets, experience with security/developer tools or adjacent technical products, SDLC familiarity, and willingness to travel; preferred: software supply chain security/AppSec/DevSecOps/open-source domain experience, high-growth startup scaling, TAM charter design, and Vitally or similar CS platform experience
Remote US or Canada
The ideal candidate has personally owned at least two full SOC 2 Type II cycles and possesses deep experience with ISO 27001 and ISMS implementation. You must be proficient in building automations against cloud services and have clear opinions on compliance platforms like Drata or Vanta.
Remote US only
The ideal candidate has experience building production web applications and integrating APIs with relational databases like Postgres. Proficiency in Node.js, JavaScript, React, and TypeScript is required, along with a background in early-stage, 0-1 team environments.
Remote United States or Canada only
Candidates must have at least 5 years of experience in pre-sales technical roles and 2 years in customer success or account management. A strong technical background in software engineering, security, or developer tools is required, along with proficiency in package managers and scripting languages.
Remote UK only
Requires deep technical literacy, proficiency in short-form video and audio editing, and a strong portfolio of storytelling work. Candidates must be AI-native, comfortable with developer culture, and capable of managing a content calendar independently.
Remote-first. No location restrictions mentioned; can work from anywhere with quarterly team off-sites.
Requires experience leading engineering teams in fast-moving environments and strong technical judgment to engage in architectural discussions. Candidates should be comfortable working in a TypeScript/JavaScript ecosystem and possess strong product sense.
Remote in the United States only.
Requires 10+ years of experience in technical partnerships or business development within developer tools, security, or infrastructure software. Candidates must be able to communicate complex technical concepts like APIs and CI/CD flows while negotiating business agreements.
Remote US only
Requires 4+ years of B2B SaaS sales experience and 2+ years of experience leading Account Executives. Proficiency in HubSpot and experience selling to technical buyers like DevOps or Security teams is highly preferred.
Remote US only
Requires prior technical experience in roles such as Software Development or Solutions Architecture and the ability to write basic scripts in Python, JS, or Golang. Candidates should have hands-on experience in customer-facing roles and familiarity with source control managers.
Remote US only
Candidates should have over 6 years of experience in channel sales or partnership management, preferably in the security or AppSec domain. Strong knowledge of enterprise security ecosystems and proven relationship development skills are essential.
Remote US only
Candidates must have experience scaling an engineering organization up to 100 people, possessing a deep understanding of what breaks during scaling and how to build effective operating systems without creating bureaucracy. A strong requirement is deep, hands-on technical depth, including regular coding and sophisticated architectural discussions, alongside a track record of managing complex cross-functional programs.
Remote anywhere
Socket is one of the few security companies where the people building the product are the people the product protects. Feross Aboukhadijeh maintained over 100 npm packages downloaded more than a billion times a month before founding it, and he told Outset Capital in April 2026 that of roughly 40 engineers, over half have been open source authors and the team collectively accounts for about 15 to 20% of all npm download traffic. Anders Møller, the Aarhus University professor who led the Coana research group, now leads research at Socket, and the team publishes its malware findings for free, which Feross credits with building early trust.
The company is at a specific inflection point that it describes openly. In a founder letter on the VP of Engineering posting, Feross writes: "A 40-person engineering team that moves with velocity and keeps a high bar on what ships. We don't have the usual dysfunction that plagues fast-growing companies," and sets the problem as "how do you stay fast and maintain code quality and culture while you scale from 40 to 80+ engineers?" The go-to-market side is expanding just as fast: the company is making its first Tech Partnerships, Channels and Partners, and Compliance Engineering hires, building a team of 7 to 8 Account Executives under one Commercial Sales Manager, and staffing EMEA customer success from the UK and Denmark.
Pay bands are printed on US postings and every role includes equity, with comprehensive health coverage for you and your family at 99% coverage.
Six values appear at the bottom of every posting: pursue excellence, move with urgency and focus ("we prioritize swift, decisive action"), think rigorously ("we care about being right and it often takes reasoning from first principles to get there"), trust and amplify ("we overtrust, always assume good intent, and give specific feedback"), feel a strong sense of ownership ("we wear many hats... and we're non-territorial regarding our nominal domains"), and be customer obsessed. The careers page frames the same thing as five principles: learning, collaboration, transparency, experimentation and passion.
The expectations are stated plainly. A Customer Success posting says: "The best candidates for Socket are talented, hard working, competitive, and not afraid to fail. They are team first but willing to take the lead with minimal guidance and supervision." Technical Account Managers are told: "We don't have a separate support team. When something doesn't work as expected, you investigate." The founder letter on the VP of Engineering role puts the operating philosophy as "how you build is as important as what you build" and asks the hire to spend a third of their time hands-on, "because your technical credibility determines whether people actually trust your leadership on the hard calls."
The structure is flat and role boundaries are loose. An engineer who joined from academia wrote on the company blog in August 2024 that Socket "embodies the startup ideal of breaking down traditional role boundaries and a flat hierarchy, which I know Feross strives to maintain as we continue to grow," and described switching between data scientist and full-stack engineer hats. On the sales side, Alexandra Lister, promoted from SDR to Account Executive in 2026, said: "Everyone is collaborative. People share what's working, help each other think through deals, and there's a lot of openness around learning."
Socket's engineering interview process has seven published steps: an informational call with the Talent team, a hiring manager interview, technical interviews, an internal debrief, a final interview with Feross, references, then decision and offer. Postings say leveling and compensation "will be aligned dynamically throughout the interview process to match your technical scope and background," so there is no fixed level applied for. Final-round interviews are now held in person: after Socket's threat intelligence team identified 80 confirmed fraudulent engineering candidates in two months in 2025, including suspected North Korean operators, the company wrote in September 2025 that in-person finals serve a "dual purpose" of assessing culture fit and confirming "Is this the person we've been interviewing?" Expect verified government ID on LinkedIn, back-channel references through industry contacts, and portfolio requirements with real code and contribution history.
What they screen for, in their own words: engineers who "move fast, prioritize ruthlessly, and are focused on the end user" and who have worked on an early-stage 0-to-1 team; managers with an "instinct to step toward ambiguous or unowned problems, including the unglamorous seams between teams" and experience managing globally distributed remote teams; and in sales, per Lister, people who "ask a lot of questions, take initiative, and aren't afraid to admit when they don't know something. Being coachable goes a long way." Feross has said publicly that hiring slowly beats making bad hires and that his go-to interview question looks for "energy sources," people who bring momentum to everything they touch. The Social Media Manager posting requires a portfolio with the application.
As of September 2026, US postings list Vulnerability Research Software Engineer at $110,000 to $170,000 base plus equity, and Technical Account Manager (Commercial and Enterprise) at $130,000 to $160,000 on-target earnings plus equity and commission. Ranges may span several levels, and for candidates outside the US compensation is adjusted to local market salary data. EMEA and go-to-market leadership roles do not publish bands.
The web application is Node.js, TypeScript, JavaScript and React on Postgres, with GraphQL, ElasticSearch, headless browsers and data pipelines listed as bonuses. The patching and CLI work that delivers vetted packages is Rust in Unix environments across multiple package managers. Infrastructure runs on GCP with GitHub, and the company holds SOC 2 Type II and is working toward ISO 27001. The sales team runs on HubSpot, Gong and Outreach, and hiring runs through Ashby.
Socket sells Team and Enterprise plans to security and engineering teams; features like precomputed reachability analysis are available on those tiers. Socket Firewall, which blocks malicious packages at install time, is free for everyone, and the platform can be bought through the AWS Security Hub Extended plan using committed AWS spend with the first month free.
RepVue named Socket a 2026 Reppy Award recipient in the Small Companies and Venture Capital Backed categories, with a RepVue score of 94.25 (top 5% of companies), a 98th-percentile rank for Culture and Leadership (#34 of 3,091 software organizations) and #38 for Product-Market Fit. The commercial team is organized as pods of 7 to 8 Account Executives under a manager, and the company promotes from SDR to AE.
Not at the moment. There are no internship or junior listings; the most open engineering role, Member of Technical Staff, asks for prior experience on an early-stage 0-to-1 team and production web application work, and the Vulnerability Research role asks for 3+ years. Experience bars on other roles run from 4+ years (sales management) to 5+ (Customer Success) and 6+ (Technical Account Manager).
Want remote roles like these in your inbox? Tell us what you are looking for.
Describe your next role, cut the noise