Senior Security Engineer, Web Bug Bounty Lead

Mozilla Corporation; United States; Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Bonus plan

Health benefits (medical/dental/vision

Retirement contributions

Wellness days

Holidays + birthday

Home office stipend

Well-being stipend

Parental leave

Referral program

Life/AD&D

Job summary

Mozilla Corporation is seeking a Security Engineer to own and scale the Web Bug Bounty program, partnering with product and SIRT teams to mitigate security risks and protect user privacy. You will work with researchers on external platforms, triage reports, and drive end-to-end remediation with engineering teams across Mozilla.

You will apply cloud expertise and code analysis to identify root causes and prevent recurrence, while collaborating with cross-functional teams to strengthen secure

Qualifications

• 3+ years in a security engineering role.
• Experience operating bug bounty programs, with automation and scaling.
• Practical experience with modern cloud technologies (AWS, GCP, Azure, etc.).
• Experience analyzing code and systems to move from vulnerability to prevention.
• Real-world software development or SRE/engineering operations experience.
• Strong communication and collaboration skills with cross-functional teams.
• Growth mindset and curiosity valued over formal credentials.

Responsibilities

• Own and scale Mozilla's web bug bounty program, including strategy, prioritization, KPIs, and continuous improvement.
• Lead triage and technical validation of incoming reports across multiple channels (HackerOne, Bugzilla, email).
• Drive end-to-end vulnerability remediation with engineering teams for timely fixes.
• Identify root causes and systemic issues; push long-term secure development improvements.
• Collaborate with SIRT on active incidents and post-incident reviews.
• Develop or leverage tooling to improve triage efficiency and program insights.

Skills

Security engineering

Bug bounty programs

Cloud technologies

Code analysis

Software development

Cross-functional collaboration

Growth mindset

Job description

Mozilla Corporation is seeking a Security Engineer to own and scale the Web Bug Bounty program, partnering with product and SIRT teams to mitigate security risks and protect user privacy. You will work with researchers on external platforms, triage reports, and drive end-to-end remediation with engineering teams across Mozilla.

You will apply cloud expertise and code analysis to identify root causes and prevent recurrence, while collaborating with cross-functional teams to strengthen secure