Senior Security Engineer, Bug Bounty

Mozilla
Canada
Workplace: RemoteFull timeCAD 95,000 - 139,000Function: CybersecurityExperience: 3+ yearsSkills: ["Communication","Collaboration","Problem-solving","Cross-functional influence"]

Own and scale Mozilla’s Web Bug Bounty program, including strategy, prioritization, KPIs, and continuous improvement. Serve as the primary interface with external researchers and platforms like HackerOne, triaging and validating reports from HackerOne, Bugzilla, and email. Lead end-to-end vulnerability remediation with engineering teams, collaborate with SIRT on incidents, perform targeted JavaScript and Python code reviews, and develop tooling to improve triage efficiency and program insights.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Mozilla
Mozilla
1 month ago

Senior Security Engineer, Bug Bounty

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 6 hours agoStatus: Live

Job Summary

Own and scale Mozilla’s Web Bug Bounty program, including strategy, prioritization, KPIs, and continuous improvement. Serve as the primary interface with external researchers and platforms like HackerOne, triaging and validating reports from HackerOne, Bugzilla, and email. Lead end-to-end vulnerability remediation with engineering teams, collaborate with SIRT on incidents, perform targeted JavaScript and Python code reviews, and develop tooling to improve triage efficiency and program insights.
Location: Canada
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Own and scale the Mozilla web bug bounty program, including strategy, prioritization, KPIs, and continuous improvement
  • •Act as the primary interface with external researchers and platforms (e.g., HackerOne) to build a trusted research community
  • •Lead triage and technical validation of incoming reports across HackerOne, Bugzilla, and email intake channels
  • •Drive end-to-end vulnerability remediation by partnering with engineering teams to deliver timely, effective fixes
  • •Collaborate with SIRT on active incidents and post-incident reviews, and perform targeted code reviews and tooling improvements

Pay and Benefits

Salary: CAD 95,000 - 139,000
Perks:Health InsuranceDentalVisionRetirementHome OfficeLearning BudgetPaid LeaveWellness Stipend

Key Requirements

  • •3+ years of demonstrated ability in a security engineering role
  • •Experience operating bug bounty programs, including enhancements, automation, scaling, and/or bug hunting
  • •Practical experience with modern cloud technologies such as AWS, Google Cloud Platform, Heroku, and/or Microsoft Azure
  • •Ability to analyze code and systems to move from vulnerability to root cause to prevention
  • •Real-world experience in software development and/or engineering operations
Experience:3+ years
Skills:CommunicationCollaborationProblem-solvingCross-functional influence
Languages:English
Tech Stack:JavaScriptPythonHackerOneBugzillaAmazon Web ServicesGoogle Cloud PlatformHerokuMicrosoft Azure

Company Brief

Mozilla
Mozilla is a mission-driven organization that builds open-source internet products (notably the Firefox browser) and advocates for an open, private, and secure web through software, research, and community programs.
Industry: Enterprise Software
Company Size: Large (251 to 1,000 employees)
Growth: Nonprofit & NGO
Headquarters: San Francisco, United States
Founded: 1998
Glassdoor
Glassdoor: 2.9
WebsiteLinkedInGlassdoor