Senior Security Engineer, Bug Bounty @Mozilla Corporation

Overview

The Mozilla Corporation is a non-profit-backed technology company dedicated to shaping a better internet. They are seeking a Senior Security Engineer to manage and enhance their Bug Bounty program while collaborating with various teams to ensure security risk mitigation.

Key Responsibilities

• Own and scale Mozilla’s web bug bounty program, including strategy, prioritization, KPIs, and continuous improvement.
• Act as the primary interface with external researchers and platforms, fostering a high-quality and trusted research community.
• Lead triage and technical validation of incoming reports across multiple intake channels.
• Drive end-to-end vulnerability remediation with engineering teams to ensure timely and effective fixes.
• Identify root causes and systemic issues, influencing long-term improvements in secure development practices.
• Collaborate with the Security Incident Response Team (SIRT) on active incidents and post-incident reviews.
• Perform targeted code reviews during investigations and high-risk changes.
• Develop or leverage tooling to improve triage efficiency and program insights.

Requirements

• 3+ years of experience in a security engineering role.
• Experience operating bug bounty programs and/or bug hunting.
• Practical experience with modern cloud technologies (e.g., AWS, Google Cloud, Heroku, Azure).
• Experience analyzing code and systems for vulnerabilities.
• Real-world experience in software development and/or engineering operations.
• Ability to develop tools in programming languages (e.g., Python, Go, Rust, JavaScript) is a plus.
• Strong communication, collaboration, and problem-solving skills.

Benefits

• Generous performance-based bonus plans.
• Rich medical, dental, and vision coverage.
• Generous retirement contributions with immediate vesting.
• Quarterly wellness days.
• Country-specific holidays plus a day off for your birthday.
• Home office stipend and annual professional development budget.
• Quarterly well-being stipend and paid parental leave.
• Employee referral bonus program.

Location

Remote US

How to Apply

Interested candidates should apply through the Mozilla careers page.

Deadline

Not stated.