Senior Incident Responder – Remote

Mozilla-Corporation; España; Remote; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Bonus plans

Health, dental, and vision coverage

Retirement contributions

Home office stipend

Professional development budget

Job summary

Mozilla Corporation is seeking an Incident Responder to monitor and mitigate attacks across Mozilla’s products and services. You will join a flexible team responsible for handling security incidents and must possess years of practical security experience, with the ability to respond quickly and clearly across diverse stakeholders.

You will design, implement and maintain security alerts, playbooks and escalation workflows for a high‑performing 24/7 incident response capability, and participate in

Qualifications

• 5+ years of security incidents experience at a global scale or in SOC/PSIRT/CSIRT.
• Expertise with SIEM systems such as ELK or Splunk.
• Hands-on endpoint detection and investigation experience.
• Experience with SOAR platforms (e.g., Tines or Splunk SOAR).

Responsibilities

• Identify and respond to security incidents globally.
• Act as incident commander to drive incidents through the response lifecycle.
• Design and maintain alerts, playbooks and escalation workflows for 24/7 incident response.
• Research threat intel and triage related workflows.
• Collaborate with stakeholders to improve preparation, identification, analysis, containment and post-mortem activities.
• Participate in on-call rotations.

Skills

SOC/CSIRT experience

SIEM (ELK, Splunk)

EDR/endpoint investigation

SOAR platforms

Cloud platforms (GCP/AWS/Azure)

Strong communication

Software development knowledge

Education

B.S. in a technology-focused field

Tools

ELK

Splunk

Tines

Splunk SOAR

Google Cloud Platform

AWS

Job description

Mozilla Corporation is seeking an Incident Responder to monitor and mitigate attacks across Mozilla’s products and services. You will join a flexible team responsible for handling security incidents and must possess years of practical security experience, with the ability to respond quickly and clearly across diverse stakeholders.

You will design, implement and maintain security alerts, playbooks and escalation workflows for a high‑performing 24/7 incident response capability, and participate in