Senior Security Engineer

Job Summary

Owning and managing the Mozilla Web Bug Bounty program, the full-time Senior Security Engineer will oversee strategy, triage incoming reports, and drive vulnerability remediation while working remotely.

Key responsibilities

• Scale and enhance the web bug bounty program, including strategy and KPIs
• Act as the primary interface with external researchers and platforms, fostering a trusted research community
• Lead the triage and technical validation of incoming security reports and collaborate on vulnerability remediation

Required qualifications

• 3+ years of experience in a security engineering role
• Experience operating and enhancing bug bounty programs
• Practical experience with modern cloud technologies (e.g., AWS, Google Cloud Platform)
• Experience analyzing code and systems for vulnerability prevention
• Real-world experience in software development or engineering operations