This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
You will collaborate with world-class software engineers to build the next generation of defenses against software supply chain attacks. This internship offers a unique opportunity to translate cutting-edge research ideas into real-world systems that safeguard millions of developers worldwide. You will contribute to the design and implementation of large-scale data collection and analysis pipelines, conduct in-depth investigations of malicious activity in open source ecosystems, and prototype novel techniques for detecting fraud and abuse on platforms such as GitHub. As one of our research interns, you will not only push the boundaries of software supply chain security but also help shape the culture and direction of a fast-growing security company. This role is ideal for PhD students eager to bridge academia and industry and bring innovative research into production environments while gaining hands-on development experience in a high-impact, mission-driven setting.
Job Responsibility:
Conduct applied research on emerging threats in the software supply chain (e.g., typosquatting, dependency confusion, malicious maintainers) and translate findings into detection prototypes
Design and evaluate novel algorithms for identifying malicious or inauthentic activity across ecosystems such as npm, PyPI, and GitHub
Leverage data science and machine learning techniques to model suspicious publishing behaviors, coordinated activity, and fraud campaigns
Develop automated research tools to collect, transform, and analyze large-scale datasets from third-party APIs (e.g., npm, GitHub, PyPI)
Prototype and validate detection systems that can be integrated into Socket’s threat intelligence platform, bridging research insights with production impact
Collaborate with engineers and designers to experiment with new ways of surfacing research findings in user-facing interfaces and developer workflows
Publish research outputs internally (dashboards, reports, proofs-of-concept) to influence product strategy and share with the broader community when appropriate
Contribute to the early team culture, bringing a research-driven perspective to technical discussions, prioritization, and the company’s long-term vision
Requirements:
Enrolled in a postgraduate or PhD program in computer science (or related field)
Strong background in one or more of the following: program analysis, data mining, applied machine learning, large-scale systems, or security research
Proficiency with languages commonly used for prototyping and research (e.g., JavaScript/TypeScript, Python, or similar)
Familiarity with software and systems security concepts, such as threat modeling, malware analysis, or adversarial behavior in open ecosystems
Experience conducting research involving data analysis, statistical methods, or experimental evaluation
Strong analytical and creative problem-solving skills
Self-motivated and comfortable driving independent research while collaborating with an interdisciplinary team
Strong written and verbal communication skills for presenting research findings and collaborating across engineering and design
Nice to have:
Static/dynamic analysis of software or binaries
Open source security research or published academic work
Experience with Socket-supported ecosystems
Building scalable data pipelines or visualization dashboards
What we offer:
Equity
Health insurance
Vacation time
Holidays
Paid parental leave
Market competitive salary bands
Meaningful equity program
Comprehensive health benefits for you and your family
Flexible time-off, holidays, and winter shutdown to rest & recharge