Senior Security Engineer, Bug Bounty @Mozilla Corporation

Overview

The role of Senior Security Engineer at Mozilla involves managing the Mozilla Web Bug Bounty program while ensuring risk mitigation of security incidents. The Mozilla Corporation is a non-profit-backed technology firm focused on improving the internet by providing open-source solutions.

Key Responsibilities

• Own and scale Mozilla’s web bug bounty program, including strategy, prioritization, KPIs, and continuous improvement.
• Act as the primary interface with external researchers and platforms, fostering a trusted research community.
• Lead triage and technical validation of incoming reports across multiple intake channels.
• Drive end-to-end vulnerability remediation, partnering with engineering teams for timely fixes.
• Identify root causes and systemic issues, influencing long-term improvements in secure development practices.
• Collaborate with the Security Incident Response Team (SIRT) on incidents and post-incident reviews.
• Perform targeted code reviews during investigations and high-risk changes.
• Develop or leverage tooling to improve triage efficiency and program insights.

Requirements

• 3+ years of experience in a security engineering role.
• Experience operating bug bounty programs, including scaling and automation.
• Knowledge of modern cloud technologies such as AWS, GCP, and Azure.
• Experience in analyzing code and systems to prevent vulnerabilities.
• Background in software development and/or engineering operations.
• Ability to develop tools in programming languages like Python, Go, Rust, or JavaScript is a plus.
• Strong communication and problem-solving skills to guide cross-functional teams.
• Real-world experience and a growth mindset are valued over formal credentials.

Benefits

• Generous performance-based bonus plans.
• Rich medical, dental, and vision coverage.
• Generous retirement contributions with immediate vesting.
• Quarterly wellness days for all employees.
• Country-specific holidays plus a day off for your birthday.
• One-time home office stipend and annual professional development budget.
• Quarterly well-being stipend and paid parental leave.
• Employee referral bonus program and other benefits.

Location

Remote Canada

How to Apply

To apply, please visit Mozilla's career page and find the application link for this position.

Deadline

Not specified.