Senior Security Engineer, Bug Bounty @Mozilla

Overview

The role of Senior Security Engineer at Mozilla involves managing the Mozilla Web Bug Bounty program to enhance security and protect the internet as a public resource. This position is fully remote within Germany.

Key Responsibilities

• Own and scale Mozilla’s web bug bounty program, focusing on strategy, prioritization, KPIs, and continuous improvement.
• Act as the primary interface with external researchers and platforms such as HackerOne to foster a trusted research community.
• Lead triage and the technical validation of incoming security reports from multiple channels.
• Drive end-to-end vulnerability remediation in collaboration with engineering teams.
• Identify root causes and suggest long-term improvements in secure development practices.
• Collaborate with the Security Incident Response Team (SIRT) on active incidents and post-incident reviews.
• Perform targeted code reviews, primarily in JavaScript and Python.
• Develop or leverage tooling to improve triage efficiency and program insights.

Requirements

• 3+ years in a security engineering role.
• Experience with bug bounty programs, including enhancements and automation.
• Practical experience with modern cloud technologies (e.g., AWS, Google Cloud Platform).
• Experience analyzing code and systems for vulnerabilities.
• Real-world experience in software development or engineering operations.
• Skills in multiple programming languages (e.g., Python, Go, Rust, JavaScript) are a plus.
• Strong communication and problem-solving skills.
• A focus on real-world experience and a growth mindset.

Benefits

• Generous performance-based bonus plans.
• Comprehensive medical, dental, and vision coverage.
• Generous retirement contributions with immediate vesting.
• Quarterly wellness days.
• Country-specific holidays plus a birthday off.
• Home office stipend.
• Annual professional development budget.
• Quarterly well-being stipend.
• Paid parental leave.
• Employee referral bonus program.
• Various other benefits (life insurance, disability, etc.).

Location

Remote position based in Germany.

How to Apply

For application details, please visit the Mozilla careers page.

Deadline

Open until filled.