Global Incident Response Lead — Remote

Mozilla; Netherlands; Teletrabalho; EUR 66 000 - 88 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Generous performance-based bonus

Comprehensive medical/dental/vision

100% immediate vesting retirement

Home office stipend

Professional development budget

Well-being stipend

Parental leave

Employee referral program

Resumo da oferta

Mozilla is seeking an Incident Responder to monitor and mitigate attacks across Mozilla’s products and services. You will join a flexible team responsible for handling security incidents and will act as incident commander to drive responses across a 24/7 lifecycle.

Bring 5+ years in security incidents, strong SIEM and EDR expertise, and capacity to partner with diverse stakeholders. The role emphasizes collaboration, threat hunting, and maintaining the integrity of Mozilla’s products and users

Qualificações

• 5+ years managing security incidents globally or in SOC/CSIRT teams.
• Experience with SIEM systems (ELK, Splunk) and threat hunting.
• Hands-on experience with leading EDR tools and endpoint telemetry analysis.
• Experience with SOAR platforms such as Tines or Splunk SOAR.
• Strong communication and leadership to partner with diverse stakeholders.
• Background in software development/engineering operations is helpful.
• Practical cloud experience (GCP, AWS, Azure).

Responsabilidades

• Identify and respond to security incidents on a global scale.
• Act as an incident commander to drive incidents through the response lifecycle.
• Design and maintain security alerts, playbooks and escalation workflows for 24/7 IR capability.
• Conduct threat hunting and develop forward-thinking defense strategies.
• Research threat intelligence and manage related workflows.
• Collaborate with stakeholders to improve preparation, identification, analysis, containment, and post mortems.
• Participate in on-call rotation.

Conhecimentos

Security incident response

SOC/PSIRT/CSIRT experience

SIEM expertise (ELK, Splunk)

EDR tools

SOAR platforms (Tines, Splunk SOAR)

Cloud platforms (GCP, AWS, Azure)

Communication & leadership

Software development / engineering ops

Formação académica

B.S. in a technology-focused field

Ferramentas

Splunk

ELK

Tines

Splunk SOAR

EDR tools

GCP

AWS

Azure

Descrição da oferta de emprego

Mozilla is seeking an Incident Responder to monitor and mitigate attacks across Mozilla’s products and services. You will join a flexible team responsible for handling security incidents and will act as incident commander to drive responses across a 24/7 lifecycle.

Bring 5+ years in security incidents, strong SIEM and EDR expertise, and capacity to partner with diverse stakeholders. The role emphasizes collaboration, threat hunting, and maintaining the integrity of Mozilla’s products and users