Mozilla

Senior Security Engineer, Bug Bounty

Remote Canada · Senior

Sponsorship not specified$104k-$139kDetected 1 day ago

JavaScriptPythonGoRustCode ReviewAWSGCPAzureCloud PlatformsCybersecurityIncident ResponseResearchCommunicationCollaborationProblem Solving

About the role

Mozilla Corporation is the non-profit-backed technology company that has shaped the internet for the better over the last 25 years.
We make pioneering brands like Firefox, the privacy-minded web browser.
Now, with more than 225 million people around the world using our products each month, we're shaping the next 25 years of technology and helping to reclaim an internet built for people, not companies.

Own and scale Mozilla's web bug bounty program, including strategy, prioritization, KPIs, and continuous improvement
Lead triage and technical validation of incoming reports across multiple intake channels (HackerOne, Bugzilla, email)
Drive end-to-end vulnerability remediation, partnering with engineering teams to ensure timely, effective fixes
Collaborate with the Security Incident Response Team (SIRT) on active incidents and post-incident reviews
Perform targeted code reviews (primarily JavaScript and Python) during investigations and high-risk changes
Develop or leverage tooling to improve triage efficiency, signal quality, and program insights
Along with thousands of volunteer contributors and collaborators all over the world, Mozillians design, build and distribute open-source software that enables people to enjoy the internet on their terms.
Mozilla exists to build the Internet as a public resource accessible to all because we believe that open and free is better than closed and controlled.
Join us to work on the Web as the platform and help create more opportunity and innovation for everyone online.

3+ years of demonstrated ability in a security engineering role.
Experience operating bug bounty programs, including enhancements, automation and scaling, and/or bug hunting
Practical experience working with modern cloud technologies (eg.
Amazon Web Services, Google Cloud Platform, Heroku, Microsoft Azure, etc.)
Experience analyzing code and systems to move from vulnerability → root cause → prevention
Real-world experience in software development and/or engineering operations
Python, Go, Rust, Javascript, etc.) is a plus, but not required.
Strong communication, collaboration, and problem-solving skills, with the ability to influence and guide cross-functional teams.

Generous performance-based bonus plans to all eligible employees - we share in our success as one team
Rich medical, dental, and vision coverage
Generous retirement contributions with 100% immediate vesting (regardless of whether you contribute)
Quarterly all-company wellness days where everyone takes a pause together
One-time home office stipend
Quarterly well-being stipend
Considerable paid parental leave
Employee referral bonus program
Other benefits (life/AD&D, disability, EAP, etc. - varies by country)
Commitment to diversity, equity, inclusion, and belonging

This means we aren't beholden to any shareholders - only to our mission.
When you work at Mozilla, you give yourself a chance to make a difference in the lives of Web users everywhere.
And you give us a chance to make a difference in your life every single day.

omestic partner status, disability, sexual orientation, age, genetic predisposition, medical condition, marital status, citizenship status, military or veteran status, or any other basis covered by applicable laws

This listing is sourced directly from Mozilla's careers page and normalized into a canonical job model.