Senior Incident Responder & Threat Hunter (Global)

Mozilla; Spain (TX); Remote; USD 66,000 - 87,000; Full time

Benefits offered by this job

Bonus program

Health benefits (medical/dental/vision

Retirement plan

Home office stipend

Professional development budget

Parental leave

Referral bonus

Additional benefits

Job summary

Mozilla is seeking an Incident Responder to monitor and mitigate attacks across Mozilla’s products and services. You will join a flexible 24/7 incident response team, coordinating with global stakeholders to protect users and maintain product integrity.

You’ll lead incident response lifecycle as incident commander, design alerts and playbooks, and perform threat hunting to anticipate emerging threats. Strong communication and collaboration are essential.

Qualifications

• Minimum 5+ years managing security incidents at global scale or in SOC/PSIRT/CSIRT teams.
• Strong experience with SIEM systems (Splunk, ELK, BigQuery).
• Hands-on endpoint detection and investigation using leading EDR tools.
• Experience with SOAR platforms (Tines, Splunk SOAR).
• Excellent communication and leadership; able to coordinate with diverse stakeholders.
• Background in software development or engineering operations for consumer tech.
• Cloud proficiency in GCP/AWS/Azure.

Responsibilities

• Identify and respond to security incidents globally.
• Act as incident commander to drive incidents through response lifecycle.
• Design and maintain alerts, playbooks, and escalation workflows for 24/7 readiness.
• Conduct threat hunting and maintain forward-looking strategies against threats.
• Research threat intel, triage, and manage resulting workflows.
• Collaborate with stakeholders to sustain a feedback loop of preparation to post mortem.
• Participate in on-call rotation.

Skills

Security incident management

SIEM proficiency

Endpoint security

SOAR platforms

Leadership

Software development experience

Cloud computing

Tools

Splunk

ELK Stack

Google BigQuery

Tines

Splunk SOAR

AWS

Azure

Job description

Mozilla is seeking an Incident Responder to monitor and mitigate attacks across Mozilla’s products and services. You will join a flexible 24/7 incident response team, coordinating with global stakeholders to protect users and maintain product integrity.

You’ll lead incident response lifecycle as incident commander, design alerts and playbooks, and perform threat hunting to anticipate emerging threats. Strong communication and collaboration are essential.