Senior Incident Responder - Global Security Operations

Mozilla; United States; Remote; USD 140,000 - 210,000; Full time

Job summary

Mozilla is seeking an Incident Responder to monitor and mitigate attacks across Mozilla’s products and services. You will be part of a flexible team responsible for handling security incidents, requiring practical security experience and knowledge of the state of the art for detecting and responding to attacks.

You’ll act as incident commander to drive incidents through the entire response lifecycle, design and maintain alerts and escalation workflows for a high‑performing 24/7 capability, and

Qualifications

• 5+ years of demonstrated ability managing security incidents at a global scale or in SOC/PSIRT/CSIRT teams.
• Experience with security information and event management (SIEM) systems.

Responsibilities

• Identify and respond to security incidents on a global scale.
• Act as an incident commander to drive incidents through the entire response lifecycle.
• Design and maintain alerts, playbooks, and escalation workflows for 24/7 incident response.
• Conduct threat hunting and develop forward-thinking strategies against threat actors.
• Research threat intelligence and manage resulting workflows.
• Collaborate with stakeholders to improve preparation, identification, analysis, containment and post-mortem activities.
• Participate in on-call rotation.

Skills

Incident response

SOC/PSIRT/CSIRT

Global scale operations

SIEM experience

Tools

ELK

Job description

Mozilla is seeking an Incident Responder to monitor and mitigate attacks across Mozilla’s products and services. You will be part of a flexible team responsible for handling security incidents, requiring practical security experience and knowledge of the state of the art for detecting and responding to attacks.

You’ll act as incident commander to drive incidents through the entire response lifecycle, design and maintain alerts and escalation workflows for a high‑performing 24/7 capability, and