2 months ago
Remote, United KingdomSenior
Responsibilities
- Own and scale Mozilla’s web bug bounty program, including strategy, prioritization, KPIs, and continuous improvement.
- Serve as the primary interface with external researchers and platforms such as HackerOne.
- Lead triage and technical validation of reports from HackerOne, Bugzilla, email, and other intake channels.
- Drive end-to-end vulnerability remediation with engineering teams.
- Identify root causes and systemic issues and influence improvements in secure development practices.
- Collaborate with the Security Incident Response Team on active incidents and post-incident reviews.
- Perform targeted code reviews, primarily in JavaScript and Python, during investigations and high-risk changes.
- Develop or leverage tooling to improve triage efficiency, signal quality, and program insights.
Requirements
- At least 3 years of demonstrated experience in a security engineering role.
- Experience operating, enhancing, automating, or scaling bug bounty programs and/or experience in bug hunting.
- Practical experience with modern cloud technologies such as Amazon Web Services, Google Cloud Platform, Heroku, and Microsoft Azure.
- Experience analyzing code and systems from vulnerability discovery through root cause and prevention.
- Real-world software development and/or engineering operations experience.
- Ability to develop tools in programming languages such as Python, Go, Rust, and JavaScript is a plus but not required.
- Strong communication, collaboration, problem-solving, and cross-functional influence skills are required.
- Formal credentials are optional; real-world experience, curiosity, passion, and a growth mindset are valued.
Benefits
- Performance-based bonus plans for eligible employees; medical, dental, and vision coverage; retirement contributions with immediate vesting; quarterly wellness days; country-specific holidays and a birthday day off; home office stipend; professional development budget; well-being stipend; paid parental leave; employee referral bonus; and additional benefits varying by country.
- Remote role for the UK, as indicated by the remote UK hiring range.
Tech Stack
Categories
About Mozilla
Mozilla builds open-source internet software, best known for the Firefox web browser, plus privacy tools like a VPN, password manager, and identity services. Its products are largely free and monetized through search partnerships and paid subscriptions, serving consumers, developers, and enterprises building for the web. Founded in 2005 and headquartered in San Francisco, Mozilla Corporation is wholly owned by the non-profit Mozilla Foundation.