Senior Security Engineer, Bug Bounty

📋 Description

• Own and scale Mozilla's Web Bug Bounty program with strategy and KPIs.
• Interface with external researchers and platforms (e.g., HackerOne).
• Lead triage and validation of reports across HackerOne, Bugzilla, email.
• Drive end-to-end remediation with engineering teams for timely fixes.
• Identify root causes and influence secure development improvements.
• Collaborate with the Security Incident Response Team on incidents.

🎯 Requirements

• 3+ years in a security engineering role.
• Experience operating bug bounty programs, automation, and scaling.
• Cloud experience with AWS, Google Cloud Platform, Azure, or Heroku.
• Experience analyzing code to move from vulnerability to root cause to prevention.
• Real-world software development or engineering operations experience.
• Ability to develop tools in Python/Go/Rust/JavaScript; a plus.

🎁 Benefits

• Generous performance-based bonus plans.
• Medical, dental, and vision coverage.
• 100% immediate vesting retirement contributions.
• Quarterly company-wide wellness days.
• Country-specific holidays plus a birthday day off.
• One-time home office stipend.