Mozilla

3 days ago

Senior Security Engineer, Bug Bounty

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 16 hours agoStatus: Live

Job Summary

Own and scale Mozilla’s web bug bounty program by setting strategy, prioritization, KPIs, and continuous improvements. Serve as the primary interface for external researchers and platforms (e.g., HackerOne), triage and validate incoming reports, and drive end-to-end vulnerability remediation with engineering teams. Analyze root causes to improve secure development practices and partner with the Security Incident Response Team during active and post-incident reviews, including targeted JavaScript/Python code reviews.

Location: United Kingdom

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Own and scale Mozilla’s web bug bounty program, including strategy, prioritization, KPIs, and continuous improvement.
•Act as the primary interface with external researchers and platforms, fostering a trusted research community.
•Lead triage and technical validation of incoming reports across intake channels (HackerOne, Bugzilla, email).
•Drive end-to-end vulnerability remediation by partnering with engineering teams for timely, effective fixes.
•Collaborate with SIRT on active incidents and post-incident reviews, including targeted JavaScript/Python code reviews and tooling to improve triage efficiency.

Pay and Benefits

Salary: GBP 66,000 - 87,000

Perks:Health InsuranceDentalVisionRetirementHome OfficeLearning BudgetPaid Leave

Key Requirements

•3+ years of demonstrated ability in a security engineering role.
•Experience operating bug bounty programs, including enhancements, automation and scaling, and/or bug hunting.
•Practical experience with modern cloud technologies (e.g., Amazon Web Services, Google Cloud Platform, Heroku, Microsoft Azure).
•Experience analyzing code and systems from vulnerability to root cause to prevention.
•Real-world experience in software development and/or engineering operations.

Experience:3+ yearsSecurity engineeringBug bountyCloud

Skills:CommunicationCollaborationProblem-solvingCross-functional influenceTool building

Languages:English

Tech Stack:HackerOneBugzillaJavaScriptPythonAmazon Web ServicesAWSGoogle Cloud PlatformGCPHerokuMicrosoft AzureCloud technologiesSIRT

Company Brief

Mozilla

Mozilla is a mission-driven organization that builds open-source internet products (notably the Firefox browser) and advocates for an open, private, and secure web through software, research, and community programs.

Industry: Enterprise Software

Company Size: Large (251 to 1,000 employees)

Growth: Nonprofit & NGO

Headquarters: San Francisco, United States

Founded: 1998

Glassdoor: 2.9

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Mozilla

3 days ago

Senior Security Engineer, Bug Bounty

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 16 hours agoStatus: Live

Job Summary

Location: United Kingdom

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Own and scale Mozilla’s web bug bounty program, including strategy, prioritization, KPIs, and continuous improvement.
•Act as the primary interface with external researchers and platforms, fostering a trusted research community.
•Lead triage and technical validation of incoming reports across intake channels (HackerOne, Bugzilla, email).
•Drive end-to-end vulnerability remediation by partnering with engineering teams for timely, effective fixes.
•Collaborate with SIRT on active incidents and post-incident reviews, including targeted JavaScript/Python code reviews and tooling to improve triage efficiency.

Pay and Benefits

Salary: GBP 66,000 - 87,000

Perks:Health InsuranceDentalVisionRetirementHome OfficeLearning BudgetPaid Leave

Key Requirements

•3+ years of demonstrated ability in a security engineering role.
•Experience operating bug bounty programs, including enhancements, automation and scaling, and/or bug hunting.
•Practical experience with modern cloud technologies (e.g., Amazon Web Services, Google Cloud Platform, Heroku, Microsoft Azure).
•Experience analyzing code and systems from vulnerability to root cause to prevention.
•Real-world experience in software development and/or engineering operations.

Experience:3+ yearsSecurity engineeringBug bountyCloud

Skills:CommunicationCollaborationProblem-solvingCross-functional influenceTool building

Languages:English

Tech Stack:HackerOneBugzillaJavaScriptPythonAmazon Web ServicesAWSGoogle Cloud PlatformGCPHerokuMicrosoft AzureCloud technologiesSIRT

Company Brief

Mozilla

Industry: Enterprise Software

Company Size: Large (251 to 1,000 employees)

Growth: Nonprofit & NGO

Headquarters: San Francisco, United States

Founded: 1998

Glassdoor: 2.9

Website LinkedIn Glassdoor