Senior Security Engineer, Bug Bounty

📋 Description

• Own and scale Mozilla’s bug bounty program with strategy and KPIs
• Interface with external researchers and platforms (e.g., HackerOne)
• Lead triage and validation of reports across channels (HackerOne, Bugzilla, email)
• Drive end-to-end vulnerability remediation with engineering teams
• Identify root causes and drive secure development improvements
• Collaborate with the Security Incident Response Team on incidents

🎯 Requirements

• 3+ years in a security engineering role
• Experience operating bug bounty programs and scaling
• Practical cloud experience (AWS, Google Cloud Platform, Azure)
• Experience analyzing code and systems to move from vulnerability to root cause
• Real-world software development and/or engineering operations experience
• Ability to develop tools in Python, Go, Rust, or JavaScript is a plus

🎁 Benefits

• Generous performance-based bonus
• Rich medical, dental, and vision coverage
• 100% immediate vesting retirement contributions
• Quarterly all-company wellness days
• Country-specific holidays plus a birthday off
• One-time home office stipend