RemoteLeaf Logo
Log in Sign up

Senior Security Engineer, Bug Bounty

3 weeks ago
United States
Full-time
Senior
Security Engineer
Cybersecurity
AWS Azure GCP Go Heroku JavaScript Python Rust
Apply Now
Mozilla

Mozilla

Mozilla, the maker of Firefox, is a non-profit organization ensuring an open, safe, and accessible internet for all users worldwide.

Internet Software & Services
251-1K
Founded 2005
$2M raised
View All Jobs 30

Description

  • Own and scale Mozilla’s web bug bounty program, including strategy, prioritization, KPIs, and continuous improvement.
  • Act as the primary interface with external researchers and platforms such as HackerOne.
  • Lead triage and technical validation of incoming reports from HackerOne, Bugzilla, and email.
  • Drive end-to-end vulnerability remediation with engineering teams.
  • Identify root causes and systemic issues to improve secure development practices.
  • Collaborate with the Security Incident Response Team on active incidents and post-incident reviews.
  • Perform targeted code reviews, primarily in JavaScript and Python, during investigations and high-risk changes.
  • Develop or leverage tooling to improve triage efficiency, signal quality, and program insights.

Requirements

  • 3+ years of demonstrated experience in a security engineering role.
  • Experience operating bug bounty programs, including enhancements, automation, scaling, and/or bug hunting.
  • Practical experience with modern cloud technologies such as Amazon Web Services, Google Cloud Platform, Heroku, or Microsoft Azure.
  • Experience analyzing code and systems to move from vulnerability to root cause to prevention.
  • Real-world experience in software development and/or engineering operations.
  • Ability to develop tools as needed in languages such as Python, Go, Rust, or JavaScript is a plus, but not required.
  • Strong communication, collaboration, and problem-solving skills with the ability to influence cross-functional teams.
  • Formal credentials are nice to have, but real-world experience, curiosity, passion, and a growth mindset matter more.

Benefits

  • Performance-based bonus plans for eligible employees.
  • Rich medical, dental, and vision coverage.
  • Generous retirement contributions with 100% immediate vesting.
  • Quarterly all-company wellness days.
  • Country-specific holidays plus a day off for your birthday.
  • One-time home office stipend.
  • Annual professional development budget.
  • Quarterly well-being stipend.
  • Considerable paid parental leave.
  • Employee referral bonus program.
  • Additional benefits such as life/AD&D, disability, and EAP, depending on country.
  • US salary range: $137,000-$183,000 (Tier 1), $126,000-$168,000 (Tier 2), or $116,000-$155,000 (Tier 3).

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Hummingbird

Senior Security Engineer

Hummingbird 1K-5K Professional Services

Hummingbird is hiring a Senior Security Engineer to own and strengthen security for its remote-first SaaS platform that helps financial institutions fight financial crime.

Anywhere Senior Security Engineer
AWS Azure CircleCI Docker Encryption GraphQL JavaScript Network Security PostgreSQL Python React Redis Ruby Ruby on Rails Terraform TypeScript
1 day, 15 hours ago
Kalles Group

Principal IAM Engineer Consultant

Kalles Group 11-50 Internet Software & Services

Kalles Group is hiring a remote Principal IAM Engineer Consultant to lead engineering design and delivery for a customer identity and access management platform in a highly regulated financial services environment.

Anywhere Full-time Lead Security Engineer Software Engineer
$160k-$220k
DevSecOps Microservices REST API SAML
2 days, 15 hours ago
PlayStation

Senior Security Research Engineer

PlayStation 100K+ Household Durables

Sony Interactive Entertainment is hiring a Senior Security Research Engineer to lead Global Vulnerability Management efforts that advance its Threat Exposure Management program and strengthen security risk reduction across the PlayStation ecosystem.

United States Full-time Lead Research Scientist Security Engineer
$176k-$263k
Bash CI/CD Domo Git JavaScript PowerShell Python Snowflake SQL
2 days, 16 hours ago
Dragos

Senior Capabilities Developer

Dragos 251-1K Professional Services

Dragos is hiring a Senior Capabilities Developer to build and maintain the Synapse-based threat intelligence infrastructure that powers analysis and reporting for critical infrastructure cybersecurity.

United States Full-time Senior Security Engineer Software Engineer
$152k-$152k
2 days, 16 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers