Global Incident Response Engineer

Mozilla-Corporation; Los Angeles, New York (CA, NY); Hybrid; USD 150,000 - 190,000; Full time

Job summary

Mozilla Corporation in Los Angeles is seeking an experienced Incident Responder to monitor, mitigate and coordinate responses to security incidents across Mozilla’s products and services. You will join a 24/7 incident response team responsible for rapid containment, root-cause analysis, and post-mortem reviews.

You’ll lead incident lifecycles, design robust playbooks, and collaborate with diverse stakeholders to protect Mozilla users and the integrity of our services.

Qualifications

• 5+ years of demonstrated ability managing security incidents at a global scale and/or experience in SOC, PSIRT, and CSIRT.
• Experience with SIEM systems (ELK, Splunk, BigQuery).
• Hands-on experience with endpoint detection and investigation using EDR tools.
• Experience with SOAR platforms such as Tines or Splunk SOAR.
• Excellent communication and leadership capacity with diverse stakeholders.
• Background in software development or engineering operations is helpful.
• Practical experience with cloud technologies (GCP, AWS, Heroku, Azure).

Responsibilities

• Identify and respond to security incidents on a global scale.
• Act as an incident commander to drive incidents through the full response lifecycle.
• Design and maintain a portfolio of security alerts, automated actions, playbooks and escalation workflows for 24/7 incident response.
• Conduct threat hunting and develop forward-thinking strategies against threats.
• Research threat intelligence reports and manage resulting workflows.
• Collaborate with stakeholders to improve preparation, identification, analysis, containment, and post-mortem activities.
• Participate in on-call rotation.

Skills

Security incident management

Leadership & communication

Software development experience

Cross-functional collaboration

Education

B.S. in a technology-focused field

Tools

SIEM (ELK, Splunk, BigQuery)

EDR tools

SOAR platforms (Tines, Splunk SOAR)

Cloud platforms (GCP, AWS, Heroku, Azure)

Job description

Mozilla Corporation in Los Angeles is seeking an experienced Incident Responder to monitor, mitigate and coordinate responses to security incidents across Mozilla’s products and services. You will join a 24/7 incident response team responsible for rapid containment, root-cause analysis, and post-mortem reviews.

You’ll lead incident lifecycles, design robust playbooks, and collaborate with diverse stakeholders to protect Mozilla users and the integrity of our services.