Overview
The Senior Security Engineer will manage and enhance Mozilla's Web Bug Bounty program, focusing on building, breaking, and securing products prioritizing user privacy and safety. Mozilla Corporation is a non-profit-backed technology company dedicated to improving the internet experience.
Key Responsibilities
- Own and scale Mozilla’s web bug bounty program, including strategy, prioritization, and continuous improvement.
- Interface with external researchers and platforms, fostering a high-quality research community.
- Lead triage and technical validation of incoming reports across multiple channels.
- Drive end-to-end vulnerability remediation in collaboration with engineering teams.
- Identify root causes and foster improvements in secure development practices.
- Collaborate with the Security Incident Response Team on active incidents and reviews.
- Perform targeted code reviews primarily in JavaScript and Python.
- Develop or leverage tools to enhance triage efficiency and program insights.
Requirements
- 3+ years of experience in a security engineering role.
- Experience with bug bounty programs, automation, and scaling.
- Practical knowledge of modern cloud technologies (e.g., AWS, Google Cloud, Azure).
- Experience analyzing code and systems to identify vulnerabilities and preventive measures.
- Background in software development or engineering operations.
- Strong communication, collaboration, and problem-solving skills.
- Ability to develop tools in various programming languages is a plus.
Benefits
- Performance-based bonuses.
- Comprehensive medical, dental, and vision coverage.
- Generous retirement contributions with immediate vesting.
- Quarterly wellness days.
- Country-specific holidays and a day off for your birthday.
- Home office stipend and annual professional development budget.
- Paid parental leave and employee referral bonus program.
- Other benefits vary by country.
Location
Remote
How to Apply
Please select your location from the Apply Now dropdown menu.