Senior Incident Responder - Global 24/7 Security

Mozilla-Corporation; United States; Remote; USD 110,000 - 170,000; Full time

Job summary

Mozilla Corporation seeks an experienced Incident Responder to monitor and mitigate security incidents across Mozilla’s products and services. You will be part of a flexible team, trusted to respond quickly and effectively with across-the-board collaboration.

You’ll lead incident response lifecycles, design security alerts and playbooks, and perform threat hunting. The role requires strong communication skills and practical cloud and security operations experience.

Qualifications

• Minimum 5+ years of security incident experience.
• Expertise with SIEM systems (ELK, Splunk, etc.).
• Hands-on with EDR tools and endpoint telemetry.
• Experience with SOAR platforms (e.g., Tines or Splunk SOAR).
• Strong communication and collaboration with stakeholders.
• Background in software development or engineering operations helpful.

Responsibilities

• Identify and respond to security incidents globally.
• Act as incident commander throughout response lifecycle.
• Design and maintain security alerts, playbooks, and escalation workflows.
• Conduct threat hunting and forward-looking defense strategies.
• Research threat intel and triage workflows.
• Coordinate with stakeholders for continuous improvement.
• Participate in on-call rotation.

Skills

Incident response leadership

Security operations

Effective communication

Stakeholder collaboration

Software development familiarity

Education

Bachelor's degree in a tech field

Tools

SIEM (ELK)

Splunk

EDR tools

SOAR (Tines)

Cloud platforms (GCP/AWS)

Job description

Mozilla Corporation seeks an experienced Incident Responder to monitor and mitigate security incidents across Mozilla’s products and services. You will be part of a flexible team, trusted to respond quickly and effectively with across-the-board collaboration.

You’ll lead incident response lifecycles, design security alerts and playbooks, and perform threat hunting. The role requires strong communication skills and practical cloud and security operations experience.