Senior Security Engineer, Bug Bounty

1 month, 1 week ago
Full-time
Senior
Cybersecurity
Mozilla

Mozilla

Mozilla, the maker of Firefox, is a non-profit organization ensuring an open, safe, and accessible internet for all users worldwide.

Internet Software & Services
251-1K
Founded 2005
$2M raised

Description

  • Own and scale Mozilla’s web bug bounty program, including strategy, prioritization, KPIs, and continuous improvement.
  • Act as the primary interface with external researchers and platforms such as HackerOne.
  • Lead triage and technical validation of incoming security reports from HackerOne, Bugzilla, and email.
  • Drive end-to-end vulnerability remediation in partnership with engineering teams.
  • Identify root causes and systemic issues and help improve secure development practices.
  • Collaborate with the Security Incident Response Team on active incidents and post-incident reviews.
  • Perform targeted code reviews during investigations and high-risk changes, primarily in JavaScript and Python.
  • Develop or use tooling to improve triage efficiency, signal quality, and program insights.

Requirements

  • 3+ years of demonstrated experience in a security engineering role.
  • Experience operating bug bounty programs, including enhancements, automation, scaling, and/or bug hunting.
  • Practical experience with modern cloud technologies such as AWS, Google Cloud Platform, Heroku, or Microsoft Azure.
  • Experience analyzing code and systems to move from vulnerability to root cause to prevention.
  • Real-world experience in software development and/or engineering operations.
  • Ability to develop tools in programming languages such as Python, Go, Rust, or JavaScript is a plus, but not required.
  • Strong communication, collaboration, and problem-solving skills with the ability to influence cross-functional teams.
  • Formal credentials are less important than real-world experience, curiosity, passion, and a growth mindset.

Benefits

  • Generous performance-based bonus plans.
  • Rich medical, dental, and vision coverage.
  • Generous retirement contributions with 100% immediate vesting.
  • Quarterly all-company wellness days.
  • Country-specific holidays plus a day off for your birthday.
  • One-time home office stipend.
  • Annual professional development budget.
  • Quarterly well-being stipend.
  • Considerable paid parental leave.
  • Employee referral bonus program.
  • Additional benefits such as life/AD&D, disability, and EAP, depending on country.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Quantum Computing / Cryptography Engineer

MKS2 Technologies 51-250 Internet Software & Services

MKS2 Technologies is seeking a remote Quantum Computing / Cryptography Engineer to support a federal program by advancing cryptographic modernization, quantum readiness, and post-quantum security migration planning.

C++ Cybersecurity Encryption Java Python
16 hours, 42 minutes ago

Cybersecurity Research Assistant

Axle Informatics 51-250 Pharmaceuticals

Axle is seeking a remote Cybersecurity Research Assistant in the United States to support rare disease research at NIH by implementing and monitoring security controls across Kubernetes, Linux, database, and high-performance computing environments.

Ansible Bash Cybersecurity DNS Elasticsearch Git Grafana Kubernetes Linux LLM Prometheus Python RHEL Secrets Management TCP/IP Terraform TLS Ubuntu
16 hours, 57 minutes ago

Cyber Security Engineer (R-00206)

True Zero Technologies 11-50 Internet Software & Services

True Zero Technologies is seeking Cybersecurity Engineers to support enterprise Zero Trust implementation by integrating security capabilities, validating controls, and producing technical evidence for authorization activities.

Cybersecurity Network Security
17 hours, 27 minutes ago

Zero Trust Engineer (R-00205)

True Zero Technologies 11-50 Internet Software & Services

True Zero Technologies is seeking Zero Trust Engineers to implement enterprise Zero Trust use cases across prioritized Department of Veterans Affairs information systems and guide them through planning, validation, testing, and operational transition.

Azure Cybersecurity
1 day, 16 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers