Senior Security Engineer, Bug Bounty

Mozilla
United States
Workplace: RemoteFull timeUSD 116,000 - 183,000 annuallyFunction: CybersecurityExperience: 3+ yearsSkills: ["Communication","Collaboration","Problem-solving","Influence","Growth mindset"]

Own and scale the Mozilla Web Bug Bounty program, including strategy, prioritization, KPIs, and continuous improvement. Serve as the primary interface for external researchers (e.g., HackerOne), leading triage and technical validation across multiple intake channels. Drive end-to-end vulnerability remediation with engineering teams, collaborate with SIRT on incidents and reviews, and perform targeted code reviews in JavaScript and Python.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Mozilla
Mozilla
1 month ago

Senior Security Engineer, Bug Bounty

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 6 hours agoStatus: Live
Reposted: similar role first listed 1 month ago

Job Summary

Own and scale the Mozilla Web Bug Bounty program, including strategy, prioritization, KPIs, and continuous improvement. Serve as the primary interface for external researchers (e.g., HackerOne), leading triage and technical validation across multiple intake channels. Drive end-to-end vulnerability remediation with engineering teams, collaborate with SIRT on incidents and reviews, and perform targeted code reviews in JavaScript and Python.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Own and scale Mozilla’s web bug bounty program, including strategy, prioritization, KPIs, and continuous improvement.
  • •Serve as the primary interface with external researchers and platforms (e.g., HackerOne) to foster a trusted research community.
  • •Lead triage and technical validation of incoming reports across multiple intake channels (HackerOne, Bugzilla, email).
  • •Drive end-to-end vulnerability remediation by partnering with engineering teams to ensure timely, effective fixes.
  • •Identify root causes and systemic issues, collaborate with SIRT on active incidents and post-incident reviews, and perform targeted code reviews (primarily JavaScript and Python).

Pay and Benefits

Salary: USD 116,000 - 183,000 annually
Perks:Health InsuranceDentalVisionRetirementWellness StipendHome OfficeLearning BudgetPaid Leave

Key Requirements

  • •3+ years of demonstrated ability in a security engineering role.
  • •Experience operating bug bounty programs, including enhancements, automation and scaling, and/or bug hunting.
  • •Practical experience working with modern cloud technologies (e.g., Amazon Web Services, Google Cloud Platform, Heroku, Microsoft Azure).
  • •Experience analyzing code and systems to move from vulnerability to root cause and prevention.
  • •Strong communication, collaboration, and problem-solving skills with the ability to influence cross-functional teams.
Experience:3+ years
Skills:CommunicationCollaborationProblem-solvingInfluenceGrowth mindset
Languages:English
Tech Stack:HackerOneBugzillaJavaScriptPythonAmazon Web ServicesGoogle Cloud PlatformHerokuMicrosoft AzureGoRust

Company Brief

Mozilla
Mozilla is a mission-driven organization that builds open-source internet products (notably the Firefox browser) and advocates for an open, private, and secure web through software, research, and community programs.
Industry: Enterprise Software
Company Size: Large (251 to 1,000 employees)
Growth: Nonprofit & NGO
Headquarters: San Francisco, United States
Founded: 1998
Glassdoor
Glassdoor: 2.9
WebsiteLinkedInGlassdoor