Overview
The Senior Security Engineer will manage and administer the Mozilla Web Bug Bounty program, working with product and security incident response teams to mitigate security risks and ensure the privacy and safety of users.
Key Responsibilities
- Own and scale Mozilla’s web bug bounty program, including strategy, prioritization, KPIs, and continuous improvement.
- Act as the primary interface with external researchers and platforms, fostering a high-quality and trusted research community.
- Lead triage and technical validation of incoming reports across multiple channels.
- Drive end-to-end vulnerability remediation, partnering with engineering teams for timely fixes.
- Identify root causes and systemic issues, influencing secure development practices.
- Collaborate with the Security Incident Response Team (SIRT) on active incidents and reviews.
- Perform targeted code reviews primarily in JavaScript and Python.
- Develop or leverage tooling to improve triage efficiency and program insights.
Requirements
- 3+ years of experience in a security engineering role.
- Experience operating bug bounty programs and/or bug hunting.
- Practical experience with modern cloud technologies like AWS, Google Cloud, or Azure.
- Experience analyzing code and systems from vulnerability to prevention.
- Real-world experience in software development and/or engineering operations.
- Strong communication, collaboration, and problem-solving skills.
- Ability to develop tools in programming languages such as Python and JavaScript is a plus.
- Real-world experience, curiosity, and a growth mindset are valued.
Benefits
- Generous performance-based bonus plans.
- Rich medical, dental, and vision coverage.
- Generous retirement contributions with immediate vesting.
- Quarterly wellness days for all employees.
- Country-specific holidays plus a day off for your birthday.
- Home office stipend and annual professional development budget.
- Quarterly well-being stipend and considerable paid parental leave.
- Employee referral bonus program and other benefits as applicable.
Location
Remote, UK
How to Apply
Please visit the Mozilla careers page to submit your application.
Deadline
Open until filled.