Senior Bug Bounty Engineer - Remote & Impactful Security

Far Coder; United Kingdom; On-site; CAD 35,166 - 56,266; Full time

Benefits offered by this job

Generous bonus plans

Medical, dental, and vision coverage

Retirement contributions

Home office stipend

Paid parental leave

Job summary

Mozilla is seeking a Remote Senior Security Engineer to own and scale the global bug bounty program. You will interface with researchers on platforms like HackerOne, drive triage and remediation across engineering teams, and help prevent security incidents through strong root-cause analysis and tooling.

The role emphasizes collaboration with SIRT, code reviews in JS/Python, and building automation to improve triage efficiency and program insights.

Qualifications

• 3+ years in a security engineering role.
• Experience operating bug bounty programs, automation and scaling.
• Cloud experience with AWS, GCP or Azure.
• Code/system analysis to root cause vulnerabilities.
• Software development or engineering operations experience.
• Ability to build tools in multiple languages (Python, Go, Rust, JS).
• Strong communication and cross-functional collaboration.

Responsibilities

• Own and scale Mozilla’s bug bounty program with strategy and KPIs.
• Interface with external researchers and platforms (HackerOne, Bugzilla).
• Lead triage and validation of reports via multiple channels.
• Drive remediation with engineering teams for timely fixes.
• Identify root causes and influence secure development improvements.
• Collaborate with SIRT on incidents and post-incident reviews.

Skills

JavaScript

Redis

Python

Rust

Java

Tools

Go

Azure

Job description

Mozilla is seeking a Remote Senior Security Engineer to own and scale the global bug bounty program. You will interface with researchers on platforms like HackerOne, drive triage and remediation across engineering teams, and help prevent security incidents through strong root-cause analysis and tooling.

The role emphasizes collaboration with SIRT, code reviews in JS/Python, and building automation to improve triage efficiency and program insights.