Bug Bounty Program Lead - Security Engineer (Remote)

Mozilla Corporation; United Kingdom; Remote; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Performance-based bonus

Medical coverage

Retirement contributions

Well-being stipend

Home office stipend

Parental leave

Employee referral bonus

Job summary

Mozilla Corporation is seeking a Security Engineer to own and scale Mozilla’s web bug bounty program, collaborating with product and SIRT teams to reduce security risk. You will lead triage, validation, and remediation across multiple channels, driving improvements in secure development practices.

The role emphasizes hands-on security engineering, bug hunting experience, and strong cross-functional communication in a remote UK setting.

Qualifications

• 3+ years of security engineering experience.
• Experience operating bug bounty programs, including automation and scaling.
• Hands-on experience with cloud platforms (AWS, GCP, Azure, etc.).
• Experience analyzing code and systems to move from vulnerability to root cause to prevention.
• Real-world experience in software development and/or engineering operations.
• Strong communication and collaboration across teams.

Responsibilities

• Own and scale Mozilla’s web bug bounty program, including strategy, KPIs, and continuous improvement.
• Interact with external researchers and platforms (e.g., HackerOne) to foster a trusted research community.
• Lead triage and technical validation of incoming reports across multiple channels (HackerOne, Bugzilla, email).
• Drive end-to-end vulnerability remediation with engineering teams to ensure timely fixes.
• Identify root causes and systemic issues and influence secure development practices.
• Collaborate with SIRT on active incidents and post-incident reviews.
• Develop or leverage tooling to improve triage efficiency and program insights.

Skills

Security engineering

Bug bounty programs

Cloud technologies

Code analysis

Software development operations

Communication

Job description

Mozilla Corporation is seeking a Security Engineer to own and scale Mozilla’s web bug bounty program, collaborating with product and SIRT teams to reduce security risk. You will lead triage, validation, and remediation across multiple channels, driving improvements in secure development practices.

The role emphasizes hands-on security engineering, bug hunting experience, and strong cross-functional communication in a remote UK setting.