Responsibilities
- Own and scale Mozilla’s web bug bounty program, including strategy, prioritization, KPIs, and continuous improvement
- Serve as the primary interface for external security researchers and platforms such as HackerOne
- Lead triage and technical validation of reports from HackerOne, Bugzilla, email, and other intake channels
- Drive end-to-end vulnerability remediation with engineering teams
- Identify root causes and systemic issues and influence improvements in secure development practices
- Collaborate with the Security Incident Response Team on active incidents and post-incident reviews
- Perform targeted JavaScript and Python code reviews during investigations and high-risk changes
- Develop or use tooling to improve triage efficiency, signal quality, and program insights
Requirements
- At least 3 years of demonstrated experience in a security engineering role
- Experience operating, enhancing, automating, or scaling bug bounty programs and/or experience with bug hunting
- Practical experience with modern cloud technologies such as Amazon Web Services, Google Cloud Platform, Heroku, or Microsoft Azure
- Experience analyzing code and systems from vulnerability discovery through root-cause analysis and prevention
- Real-world experience in software development and/or engineering operations
- Ability to develop tools in programming languages such as Python, Go, Rust, or JavaScript is preferred but not required
- Strong communication, collaboration, and problem-solving skills, with the ability to influence cross-functional teams
- Formal credentials are welcomed, but real-world experience, curiosity, passion, and a growth mindset are valued
Benefits
- Performance-based bonus plans for eligible employees
- Medical, dental, and vision coverage
- Retirement contributions with 100% immediate vesting
- Quarterly company wellness days
- Country-specific holidays and a birthday day off
- One-time home office stipend
- Annual professional development budget
- Quarterly well-being stipend
- Paid parental leave
- Employee referral bonus program
- Additional benefits such as life/AD&D insurance, disability coverage, and EAP, varying by country
Tech Stack
Categories
About Mozilla
A lot of companies say they’re “mission-driven.” Our unique corporate structure guarantees that every decision we make upholds our mission: to ensure the internet remains open and accessible. Beholden to neither shareholders nor investors, Mozilla Corporation is wholly owned by the not-for-profit Mozilla Foundation. Along with our communities of 20,000+ contributors and collaborators, Mozilla Corporation’s staff designs, builds, and distributes software that allows people to enjoy the internet on their own terms. Our flagship product — the Firefox browser — has expanded into a family of products that protects users and alerts them of risks, safeguards passwords and provides a secure VPN (with more to come). By maintaining a safe, open internet we're helping humanity, while also helping the individual humans employed here to reach their personal and professional goals. With a relatively small team serving hundreds of millions of people, a culture of exploration, and a commitment to mentorship, opportunities abound to learn and grow at Mozilla.