Senior Incident Responder — Global Security Ops (Remote)

Mozilla

España

Remote

EUR 58,000 - 77,000

Full time

3 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Bonus plans

Health coverage

Retirement contributions

Wellness days

Holidays & Birthday

Home office stipend

Professional development

Well-being stipend

Parental leave

Referral program

Additional benefits

Job summary

Mozilla is seeking an Incident Responder to monitor and mitigate attacks across Mozilla's products and services. You will be part of a flexible team responsible for handling security incidents, requiring practical security experience and the ability to respond quickly in crunch moments.

You will lead incident response on a global scale, develop alerts and playbooks, and collaborate with stakeholders to improve preparedness and containment. Remote Spain, full-time, with competitive benefits.

Qualifications

5+ years of security incidents experience at a global scale or in SOC/PSIRT/CSIRT.
Solid experience with SIEM systems; Splunk preferred; ELK/BigQuery experience a plus.
Hands-on with EDR tools and endpoint telemetry to identify root causes.
Experience with SOAR platforms such as Tines or Splunk SOAR.
Strong communication and leadership across diverse stakeholders.
Background in software development or engineering operations for consumer products.
Practical cloud experience (GCP, AWS, Azure, etc.).

Responsibilities

Identify and respond to security incidents globally.
Act as incident commander to drive incidents through the response lifecycle.
Design and maintain alerts, playbooks and escalation workflows for 24/7 readiness.
Conduct threat hunting and maintain forward-thinking defense strategies.
Research threat intel and triage resulting workflows.
Collaborate with stakeholders to improve preparation, analysis, containment and post-mortems.
Participate in on-call rotation.