Remote Incident Response Lead - Global Security Operations

Cyberjobs; United Kingdom; Remote; GBP 66,000 - 87,000; Full time

Benefits offered by this job

Performance-based bonus

Health, dental, vision coverage

Retirement contributions

Home office stipend

Professional development budget

Well-being stipend

Job summary

Mozilla is seeking an Incident Responder to monitor and mitigate attacks across Mozilla’s products and services. You will join a flexible team to handle security incidents, acting as incident commander and ensuring rapid, effective response with strong communication across stakeholders.

The role requires years of practical security experience, with expertise in SIEM, EDR, and SOAR, plus cloud familiarity. Remote UK availability is noted with competitive compensation and benefits.

Qualifications

• 5+ years of demonstrated ability managing security incidents at a global scale or in SOC/PSIRT/CSIRT environments.
• Expertise with SIEM systems (e.g., ELK, Google BigQuery, Splunk) and Splunk proficiency preferred.
• Hands-on experience with endpoint detection and investigation (EDR) and leveraging telemetry to find root cause.
• Experience with SOAR platforms such as Tines or Splunk SOAR.
• Strong communication and leadership to partner with diverse stakeholders.
• Real-world software development/engineering operations experience; tech-focus education helpful.
• Practical experience with cloud technologies (GCP, AWS, Azure, etc.).

Responsibilities

• Identify and respond to security incidents globally.
• Act as incident commander to drive incidents through the response lifecycle.
• Design and maintain alerts, playbooks, and escalation workflows for 24/7 IR.
• Conduct threat hunting and develop forward-looking defense strategies.
• Research threat intel and triage resulting workflows.
• Collaborate with stakeholders to improve incident prep, detection, containment and post-mortems.
• Participate in on-call rotation.

Skills

Incident management

SIEM

EDR

SOAR

Leadership & communication

Software development awareness

Cloud platforms

Education

B.S. in technology

Tools

Splunk

ELK

Google BigQuery

Job description

Mozilla is seeking an Incident Responder to monitor and mitigate attacks across Mozilla’s products and services. You will join a flexible team to handle security incidents, acting as incident commander and ensuring rapid, effective response with strong communication across stakeholders.

The role requires years of practical security experience, with expertise in SIEM, EDR, and SOAR, plus cloud familiarity. Remote UK availability is noted with competitive compensation and benefits.