2 months ago
Remote, GermanySenior
Responsibilities
- Own and scale Mozilla’s web bug bounty program, including strategy, prioritization, KPIs, and continuous improvement
- Serve as the primary interface with external researchers and platforms such as HackerOne
- Lead triage and technical validation of reports from HackerOne, Bugzilla, email, and other intake channels
- Drive end-to-end vulnerability remediation with engineering teams
- Identify root causes and systemic issues and influence improvements in secure development practices
- Collaborate with the Security Incident Response Team on active incidents and post-incident reviews
- Perform targeted JavaScript and Python code reviews during investigations and high-risk changes
- Develop or leverage tooling to improve triage efficiency, signal quality, and program insights
Requirements
- At least 3 years of demonstrated experience in a security engineering role
- Experience operating, enhancing, automating, or scaling bug bounty programs and/or experience bug hunting
- Practical experience with modern cloud technologies
- Experience analyzing code and systems from vulnerability discovery through root cause and prevention
- Real-world experience in software development and/or engineering operations
- Ability to develop tools in programming languages such as Python, Go, Rust, or JavaScript is preferred
- Strong communication, collaboration, and problem-solving skills with the ability to influence cross-functional teams
- Formal credentials are valued, but real-world experience, curiosity, passion, and a growth mindset are emphasized
Benefits
- Performance-based bonus plans for eligible employees
- Medical, dental, and vision coverage
- Retirement contributions with immediate vesting
- Quarterly company wellness days
- Country-specific holidays and birthday day off
- One-time home office stipend
- Annual professional development budget
- Quarterly well-being stipend
- Paid parental leave
- Employee referral bonus program
- Additional benefits such as life/AD&D insurance, disability coverage, and EAP
- Remote work in Germany
About Mozilla
Mozilla builds open-source internet software, best known for the Firefox web browser, plus privacy tools like a VPN, password manager, and identity services. Its products are largely free and monetized through search partnerships and paid subscriptions, serving consumers, developers, and enterprises building for the web. Founded in 2005 and headquartered in San Francisco, Mozilla Corporation is wholly owned by the non-profit Mozilla Foundation.