Senior Security Engineer

Job Summary

Owning and scaling Mozilla's web bug bounty program, the full-time remote Senior Security Engineer will manage strategy and prioritization, interface with external researchers, and drive vulnerability remediation efforts in collaboration with engineering teams.

Key responsibilities

• Own and scale the web bug bounty program, including strategy and continuous improvement
• Act as the primary interface with external researchers and platforms, fostering a trusted research community
• Lead triage and technical validation of incoming security reports across multiple channels

Required qualifications

• 3+ years of experience in a security engineering role
• Experience operating and enhancing bug bounty programs
• Practical experience with modern cloud technologies (e.g., AWS, Google Cloud, Azure)
• Experience in analyzing code and systems for vulnerability prevention
• Real-world experience in software development or engineering operations