Senior Security Engineer, Bug Bounty

📋 Description

• Own and scale Mozilla’s web bug bounty program and strategy
• Interface with external researchers via HackerOne
• Lead triage and validation of incoming reports (HackerOne, Bugzilla, email)
• Drive end-to-end vulnerability remediation with engineering teams
• Identify root causes and systemic issues for secure development
• Collaborate with SIRT on active incidents and post-incident reviews

🎯 Requirements

• 3+ years in a security engineering role
• Experience operating bug bounty programs, automation and scaling
• Cloud experience with AWS, GCP, Azure, etc
• Ability to analyze code and systems to move from vulnerability to root cause to prevention
• Hands-on software development or engineering operations
• Ability to develop tools in Python, Go, Rust, or JavaScript

🎁 Benefits

• Generous performance-based bonus plans
• Medical, dental, and vision coverage
• 100% immediate vesting retirement contributions
• One-time home office stipend
• Annual professional development budget
• Paid parental leave