Mozilla

Mozilla, the maker of Firefox, is a non-profit organization ensuring an open, safe, and accessible internet for all users worldwide.

Internet Software & Services

Information Technology

251-1K (750)

Founded 2005

$2M raised

41 open positions

Links

View All Jobs

Senior Security Engineer, Bug Bounty

3 hours, 16 minutes ago

Canada

Full-time

Senior

Security Engineer

Cybersecurity

AWS Azure GCP Go Heroku JavaScript Python Rust

Apply Now

Mozilla

Mozilla, the maker of Firefox, is a non-profit organization ensuring an open, safe, and accessible internet for all users worldwide.

Internet Software & Services

251-1K

Founded 2005

$2M raised

View All Jobs 41

Description

Own and scale Mozilla’s web bug bounty program, including strategy, prioritization, KPIs, and continuous improvement.
Serve as the primary interface with external researchers and platforms such as HackerOne.
Lead triage and technical validation of incoming vulnerability reports across HackerOne, Bugzilla, and email.
Drive end-to-end vulnerability remediation in partnership with engineering teams.
Identify root causes and systemic issues and influence long-term improvements in secure development practices.
Collaborate with the Security Incident Response Team on active incidents and post-incident reviews.
Perform targeted code reviews, primarily in JavaScript and Python, during investigations and high-risk changes.
Develop or leverage tooling to improve triage efficiency, signal quality, and program insights.
Work with Mozilla product and SIRT teams to mitigate security risks and incidents.

Requirements

3+ years of demonstrated experience in a security engineering role.
Experience operating bug bounty programs, including enhancements, automation, scaling, and/or bug hunting.
Practical experience with modern cloud technologies such as Amazon Web Services, Google Cloud Platform, Heroku, or Microsoft Azure.
Experience analyzing code and systems to move from vulnerability to root cause to prevention.
Real-world experience in software development and/or engineering operations.
Ability to develop tools as needed in programming languages such as Python, Go, Rust, or JavaScript is a plus, but not required.
Strong communication, collaboration, and problem-solving skills with the ability to influence cross-functional teams.
Formal credentials are less important than real-world experience, curiosity, passion, and a growth mindset.

Benefits

Generous performance-based bonus plans.
Rich medical, dental, and vision coverage.
Generous retirement contributions with 100% immediate vesting.
Quarterly all-company wellness days.
Country-specific holidays plus a day off for your birthday.
One-time home office stipend.
Annual professional development budget.
Quarterly well-being stipend.
Considerable paid parental leave.
Employee referral bonus program.
Other benefits including life/AD&D, disability, and EAP, depending on country.
Remote work under #LI-REMOTE.
Salary range of $104,000–$139,000 CAD for Canada Tier 1 locations and $95,000–$126,000 CAD for Canada Tier 2 locations.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Threat Response & Remediation Engineer

Zscaler 1K-5K Internet Software & Services

Zscaler is hiring a remote Threat Response & Remediation Engineer to investigate, contain, and fully remediate customer security incidents across endpoint, network, and identity environments.

United States Full-time Mid Level Security Engineer

$104k-$148k

CrowdStrike Cybersecurity Linux macOS

3 hours, 16 minutes ago

Apply

3 hours, 16 minutes ago

Security Operations Engineer (SecOps) II

Upstart 1K-5K Banks

Upstart is hiring a SecOps Engineer to help defend its digital-first lending platform by improving detection, response, and incident handling across corporate and product infrastructure.

United States Full-time Senior Security Engineer

$134k-$186k

AWS Git macOS Python

3 hours, 31 minutes ago

Apply

3 hours, 31 minutes ago

Sr. Cybersecurity Engineer II (6708)

MetroStar 251-1K IT Services

MetroStar is hiring a Sr. Cybersecurity Engineer II to build zero trust authentication and authorization integration architecture for enterprise application teams in classified environments.