Senior Security Engineer (Bug Bounty)

Join Mozilla as a Senior Security Engineer, where you'll manage and administer the Mozilla Web Bug Bounty program, ensuring risk mitigation of security incidents and events. You'll act as the primary interface with external researchers and platforms, lead triage and technical validation of incoming reports, drive end-to-end vulnerability remediation, and collaborate with the Security Incident Response Team. This role offers a comprehensive benefits package, including health and wellness coverage, mental health support, generous time off, parental leave, financial benefits, learning and development opportunities, and more.

• Own, manage, and administer the Mozilla Web Bug Bounty program, including strategy, prioritization, KPIs, and continuous improvement.
• Act as the primary interface with external researchers and platforms (e.g., HackerOne), fostering a high-quality and trusted research community.
• Lead triage and technical validation of incoming reports across multiple intake channels (HackerOne, Bugzilla, email), and drive end-to-end vulnerability remediation.
• Experience operating bug bounty programs, including enhancements, automation and scaling, and/or bug hunting
• 3+ years of demonstrated ability in a security engineering role
• Strong communication, collaboration, and problem-solving skills, with the ability to influence and guide cross-functional teams
• Formal credentials are great, but real-world experience, curiosity, passion and a growth mindset matter more
• Practical experience working with modern cloud technologies (eg. Amazon Web Services, Google Cloud Platform, Heroku, Microsoft Azure, etc.)
• Ability to develop your own tools as needed in a variety of programming languages (eg. Python, Go, Rust, Javascript, etc.) is a plus, but not required
• Real-world experience in software development and/or engineering operations
• Experience analyzing code and systems to move from vulnerability → root cause → prevention