Senior Bug Bounty Security Engineer — Remote

Nerdleveltech; Germany (OH); On-site; USD 78,278 - 104,754; Full time

Benefits offered by this job

Performance-based bonus

Medical, dental, vision coverage

Retirement contributions

Home office stipend

Professional development budget

Parental leave

Employee referral bonus

Wellness days

Job summary

Mozilla is seeking a Security Engineer to own, manage, and administer the Web Bug Bounty program. You will work with product and SIRT teams to mitigate security incidents and improve secure development practices across Mozilla’s web stack.

You will triage, validate, and remediate vulnerability reports from multiple channels, and build tooling to improve triage efficiency and insights. Strong coding skills in JavaScript and Python are valued, with extensive cloud experience (AWS, GCP, Azure).

Qualifications

• 3+ years in security engineering.
• Experience operating bug bounty programs, including enhancements, automation and scaling.
• Practical experience with modern cloud technologies (AWS, GCP, Azure, etc.).
• Experience analyzing code and systems to move from vulnerability → root cause → prevention.

Responsibilities

• Own and scale Mozilla's web bug bounty program, including strategy, prioritization, KPIs, and continuous improvement.
• Lead triage and technical validation of incoming reports across multiple intake channels (HackerOne, Bugzilla, email).
• Drive end-to-end vulnerability remediation with engineering teams for timely fixes.
• Identify root causes and systemic issues to influence secure development practices.
• Collaborate with SIRT on active incidents and post-incident reviews.
• Perform targeted code reviews (JavaScript, Python) during investigations and high-risk changes.
• Develop or leverage tooling to improve triage efficiency and program insights.

Skills

Bug bounty program

Cloud platforms

Code analysis

Python

JavaScript

Go

Security engineering

Tools

HackerOne

Bugzilla

AWS

GCP

Azure

Job description

Mozilla is seeking a Security Engineer to own, manage, and administer the Web Bug Bounty program. You will work with product and SIRT teams to mitigate security incidents and improve secure development practices across Mozilla’s web stack.

You will triage, validate, and remediate vulnerability reports from multiple channels, and build tooling to improve triage efficiency and insights. Strong coding skills in JavaScript and Python are valued, with extensive cloud experience (AWS, GCP, Azure).