Senior Security Engineer, Bug Bounty

📋 Description

• Own and scale Mozilla’s web bug bounty program, with strategy and KPIs
• Act as primary interface with researchers and platforms (HackerOne)
• Lead triage and validation of reports across HackerOne, Bugzilla, email
• Drive end-to-end remediation with engineering teams for timely fixes
• Identify root causes and systemic issues to improve secure dev practices
• Collaborate with SIRT on active incidents and post-incident reviews

🎯 Requirements

• 3+ years in a security engineering role
• Experience operating bug bounty programs (automation, scaling)
• Practical experience with cloud platforms (AWS, GCP, Azure)
• Experience analyzing code to move from vulnerability to root cause
• Real-world software development/engineering operations experience
• Ability to develop tools in Python/Go/Rust/JavaScript
• Strong communication and cross-functional collaboration

🎁 Benefits

• Generous performance-based bonus plans
• Rich medical, dental, and vision coverage
• Retirement contributions with 100% immediate vesting
• Annual professional development budget
• One-time home office stipend
• Quarterly all-company wellness days