Lead Incident Responder & Threat Hunter

liv; New York, Portland, San Francisco (NY, OR, CA); Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Generous bonus plan

Comprehensive medical, dental, and v헤s

Retirement contributions with vesting

Wellness days and birthday holiday

Home office stipend

Job summary

Mozilla is seeking an Incident Responder to monitor and mitigate security incidents across Mozilla’s products and services. You will join a flexible team responsible for handling security incidents and ensuring the integrity of Mozilla’s products while keeping users safe.

The role requires 5+ years in security incident management, proficiency with SIEM and SOAR tools, EDR expertise, and strong cross-functional collaboration skills.

Qualifications

• 5+ years managing security incidents at global scale or in SOC/PSIRT/CSIRT environments.
• Experience with SIEM systems (ELK, Splunk, etc.).
• Hands-on expertise with EDR tools and endpoint telemetry.
• Experience with SOAR platforms such as Tines or Splunk SOAR.
• Strong communication and leadership with cross-functional collaboration.
• Background in software development or engineering operations; tech degree helpful.
• Experience with cloud platforms (GCP, AWS, Azure).

Responsibilities

• Identify and respond to security incidents on a global scale.
• Act as an incident commander to drive incidents through the entire response lifecycle.
• Design and maintain alerts, playbooks and escalation workflows for 24/7 incident response.
• Conduct threat hunting and maintain forward-thinking defense strategies.
• Research threat intel and triage resulting workflows.
• Partner with stakeholders to maintain a feedback loop across prep, identification, analysis, containment, and post mortem.
• Participate in on-call rotation.

Skills

Security incident response

Leadership

Communication

Education

B.S. in a technology-focused field

Tools

SIEM (ELK, Splunk)

EDR tools

SOAR (Tines, Splunk SOAR)

Cloud platforms (GCP, AWS, Azure)

Job description

Mozilla is seeking an Incident Responder to monitor and mitigate security incidents across Mozilla’s products and services. You will join a flexible team responsible for handling security incidents and ensuring the integrity of Mozilla’s products while keeping users safe.

The role requires 5+ years in security incident management, proficiency with SIEM and SOAR tools, EDR expertise, and strong cross-functional collaboration skills.