about 12 hours ago
Remote, WorldwideMid Level / Senior
H1B Sponsor
Responsibilities
- Own and scale Mozilla’s web bug bounty program, including strategy and KPIs.
- Act as the primary interface with external researchers and platforms like HackerOne.
- Lead triage and technical validation of incoming security reports.
- Drive end-to-end vulnerability remediation with engineering teams.
- Identify root causes and influence long-term improvements in secure development practices.
- Collaborate with the Security Incident Response Team on active incidents.
- Perform targeted code reviews during investigations and high-risk changes.
- Develop or leverage tooling to improve triage efficiency and program insights.
Requirements
- 3+ years of experience in a security engineering role.
- Experience operating bug bounty programs and bug hunting.
- Practical experience with modern cloud technologies like AWS and Google Cloud.
- Ability to analyze code and systems to prevent vulnerabilities.
- Real-world experience in software development or engineering operations.
- Ability to develop tools in programming languages like Python or JavaScript is a plus.
- Strong communication and collaboration skills.
Benefits
- Generous performance-based bonus plans.
- Rich medical, dental, and vision coverage.
- Generous retirement contributions with immediate vesting.
- Quarterly wellness days for all employees.
- Country-specific holidays plus a day off for your birthday.
- One-time home office stipend and annual professional development budget.
- Considerable paid parental leave and employee referral bonus program.