Senior Security Engineer, Bug Bounty

📋 Description

• Own and scale Mozilla's web bug bounty program, with strategy and KPIs
• Act as primary interface with external researchers and platforms (HackerOne)
• Lead triage and validation of reports across multiple intake channels (HackerOne, Bugzilla, email)
• Drive end-to-end vulnerability remediation with engineering teams for timely fixes
• Identify root causes and systemic issues to improve secure development practices
• Collaborate with SIRT on active incidents and post-incident reviews

🎯 Requirements

• 3+ years in security engineering
• Experience operating bug bounty programs, including enhancements, automation and scaling
• Practical cloud experience with AWS, Google Cloud Platform, Azure
• Experience analyzing code and systems to move from vulnerability → root cause → prevention
• Real-world software development or engineering operations experience
• Strong communication and cross-functional collaboration

🎁 Benefits

• Generous performance-based bonus plans
• Rich medical, dental, and vision coverage
• 100% immediate vesting retirement contributions
• Quarterly company wellness days
• Birthday holiday plus country-specific holidays
• One-time home office stipend