Senior Security Engineer (SecOps)

Mozilla; Greater London; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Health coverage

Mental health support

Paid time off

Parental leave

401(k) plan

Professional development

Wellbeing stipend

Life/AD&D insurance

Job summary

Mozilla is seeking an Incident Responder to monitor and mitigate attacks across Mozilla’s products and services. You will be part of a flexible team handling security incidents and coordinating response across stakeholders.

The role requires 5+ years in security incident management, experience with SOC/CSIRT/PSIRT, cloud and SIEM skills, and strong communication. You will drive incident lifecycle as incident commander and contribute to playbooks, threat hunting, and post-mortems.

Qualifications

• 5+ years of security incident management at a global scale.
• Experience in SOC/PSIRT/CSIRT environments.
• Strong communication and leadership with stakeholders.
• Hands-on with cloud tech and security tooling.
• Experience in designing runbooks and playbooks.
• Ability to work on-call rotations.

Responsibilities

• Identify and respond to security incidents globally.
• Act as incident commander guiding the full response lifecycle.
• Design and maintain security alerts, playbooks, and escalation workflows.
• Conduct threat hunting and research threat intelligence.
• Collaborate with stakeholders and coordinate post-mortems.
• Participate in on-call rotation.

Skills

Incident response

Security leadership

Effective communication

Threat hunting

Team collaboration

Problem solving

Education

B.S. in Computer Science or related field

Tools

Tines

Splunk SOAR

GCP/AWS/Azure

EDR tools

SIEM (Splunk/ELK)

Endpoint telemetry

Job description

• Mozilla is looking for an Incident Responder to monitor and mitigate attacks across Mozilla’s products and services


• In this position, you will be a part of a flexible team responsible for handling security incidents


• As such, you’ll need to have years of practical security experience and knowledge of the state of the art for detecting and responding to attacks


• You’ll be someone Mozillians across the company depend on and trust to respond quickly and effectively in a crunch, with the outstanding communication and collaboration skills needed to work in partnership with diverse stakeholders


• Most importantly, you will become a critical member of the team responsible for ensuring the integrity of Mozilla’s products and for keeping Mozilla’s users safe, within a company dedicated to building a more secure internet


• Identify and respond to security incidents on a global scale


• Act as an incident commander to drive incidents through the entire response lifecycle


• Design and maintain a portfolio of security alerts, automated actions, playbooks and escalation workflows in support of a high-performing 24/7 incident response capability


• Conduct threat hunting activities, anticipate future threats, and maintain forward-thinking strategies for tools/technology/processes that combat sophisticated threat actors


• Research threat intelligence reports, triage and manage resulting workflows


• Partner with key stakeholders and communicate effectively to maintain a continuously improving feedback loop of preparation, identification, analysis, containment, and post mortem activities


• Participate in on-call rotation

Benefits

• Health and wellness: Mozilla covers medical, dental and vision plan premiums at 100% for U.S. and Canadian employees. Our offerings give you the options you need to manage your health — and your family’s — the way you want.


• Mental health: Mental health is as important as our physical health. That’s why Mozilla’s health benefits include therapy and coaching sessions to make sure our people have access to the care they need.


• Time away: With all of life’s demands, time away from work to disconnect and recharge is essential. In addition to country-specific holidays (12 in the U.S. and Canada), vacation and sick time start accruing right away (specifics vary by country). Everyone also takes a pause together on quarterly all-company wellness days, plus you get to celebrate the most personal holiday of all: your birthday.


• Parental leave: While Mozilla’s parental leave policies vary globally, our U.S. and Canadian-based employees can look forward to 26 weeks of paid leave for childbearing parents and 12 weeks of paid leave for non-childbearing parents.


• Financial: Mozilla is a private company, so our compensation isn’t tied to stock options or equity plans. Instead, we offer generous, performance-based bonus plans to all regular employees to underscore that we share in our success as one team. As for retirement savings for US and Canadian employees, Mozilla contributes a percentage of your eligible base salary each year to the 401(k) Plan/RRSP (regardless of whether you contribute or not), with 100% vesting.


• Learning and development: We’re big believers in learning by doing, and we also want to invest in your education and development beyond your role. Every employee is eligible for an annual professional development budget. Mozillians can put it toward technical or management training, certifications, conferences and more.


• Help when you need it: Life is full of surprises; that’s why it’s important to be prepared. Mozilla provides Life/AD&D and Short and Long Term Disability insurance (offerings may vary by locale) to ensure that you and your family will have a safety net in place should you ever need it.


• Plus a bit more: A few other benefits include a quarterly wellbeing stipend (to use on those things just for you), an employee referral bonus, internet reimbursement if you’re remote, and a budget for office essentials to make working remotely ergonomically comfortable.

• Expertise with security orchestration and automation (SOAR) platforms such as Tines or Splunk SOAR


• Practical experience working with cloud technologies (eg. Google Cloud Platform, Amazon Web Services, Heroku, Microsoft Azure, etc.)


• Expertise with endpoint detection and investigation.


• Hands-on experience with leading EDR tools and demonstrated ability to leverage endpoint telemetry to find root cause


• Expertise with security information and event management (SIEM) systems (eg. ELK, Google BigQuery, Splunk, etc.). Splunk proficiency is preferred


• Superb communication and leadership capacity; ability to partner effectively with diverse company stakeholders


• Real-world experience in software development and/or engineering operations for consumer products and services; B.S. in a technology-focused field is helpful


• 5+ years of demonstrated ability managing security incidents at a global scale and/or experience working in Security Operations Centers (SOC), Product Security Incident Response Teams (PSIRT), and Computer Security Incident Response Teams (CSIRT)


• Creative Problem Solver


• Clear Communication


• High Level of Integrity


• Autonomy


• Ownership and Accountability


• Passionate about Security—-Competencies: