Mozilla Corporation is looking for a Senior Security Engineer to join its security team in a fully remote U.S. role. This is an exciting opportunity for an experienced security professional to work on meaningful cybersecurity initiatives, strengthen security practices, and help protect products and users at a globally recognized technology organization. If you have strong security engineering experience and enjoy solving complex technical challenges, this role could be a strong next career move.
Job Overview
| Field | Details |
|---|---|
| Company Name | Mozilla Corporation |
| Role | Senior Security Engineer |
| Qualification | Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field; relevant professional experience may also be considered |
| Job Location | Remote – United States |
| Salary | $137,000–$183,000 USD per year |
| Work Type | Remote |
| Job Type | Full-Time |
| Job Level | Senior Level |
| Industry | Technology / Internet / Cybersecurity |
Job Description
At Mozilla, we believe the internet is a global public resource—open and accessible to all. As a Security Engineer, you’ll protect that vision by building, breaking, and hardening products that put people’s privacy and safety first. We are looking for a security engineer to own, manage and administer the Mozilla Web Bug Bounty program and work with Mozilla product and SIRT teams to ensure risk mitigation of security incidents and events.
What you’ll do:
- Own and scale Mozilla’s web bug bounty program, including strategy, prioritization, KPIs, and continuous improvement
- Act as the primary interface with external researchers and platforms (e.g., HackerOne), fostering a high-quality and trusted research community
- Lead triage and technical validation of incoming reports across multiple intake channels (HackerOne, Bugzilla, email)
- Drive end-to-end vulnerability remediation, partnering with engineering teams to ensure timely, effective fixes
- Identify root causes and systemic issues, and influence long-term improvements in secure development practices
- Collaborate with the Security Incident Response Team (SIRT) on active incidents and post-incident reviews
- Perform targeted code reviews (primarily JavaScript and Python) during investigations and high-risk changes
- Develop or leverage tooling to improve triage efficiency, signal quality, and program insights
What you’ll bring:
- 3+ years of demonstrated ability in a security engineering role.
- Experience operating bug bounty programs, including enhancements, automation and scaling, and/or bug hunting
- Practical experience working with modern cloud technologies (eg. Amazon Web Services, Google Cloud Platform, Heroku, Microsoft Azure, etc.)
- Experience analyzing code and systems to move from vulnerability → root cause → prevention
- Real-world experience in software development and/or engineering operations
- Ability to develop your own tools as needed in a variety of programming languages (eg. Python, Go, Rust, Javascript, etc.) is a plus, but not required.
- Strong communication, collaboration, and problem-solving skills, with the ability to influence and guide cross-functional teams.
- Formal credentials are great, but real-world experience, curiosity, passion and a growth mindset matter more.
Selection Process
- Application Submission – Submit your application and updated resume through Mozilla’s careers portal.
- Application Screening – The recruiting team reviews your qualifications and relevant security engineering experience.
- Recruiter Discussion – Selected candidates participate in an initial conversation with the recruiting team.
- Technical Interview – Candidates discuss security engineering concepts, technical experience, and problem-solving approaches.
- Team Interviews – Meet with members of the security and engineering teams to discuss the role and collaboration.
- Final Evaluation – Mozilla completes its final assessment and hiring decision.
- Offer – Successful candidates receive a formal employment offer.
How to Apply
- Visit Mozilla Corporation’s official careers website.
- Search for the Senior Security Engineer position.
- Review the job requirements and responsibilities carefully.
- Prepare an updated resume highlighting your security engineering experience.
- Complete the online application form.
- Submit your application and required information.
- Monitor your email for interview and application updates.
