Senior Security Engineer, Add-ons Operations

This is a fully remote position, open to applicants in Canada.

📋 Description

• Implement significant features and architectural enhancements across the Add-ons stack, which includes automated moderation pipelines, Reviewer tools, and DevHub.

• Develop strong observability systems and insights backed by data.

• Offer constructive peer feedback, share knowledge, and assist in the growth of others.

• Enhance platform reliability through effective deployments, monitoring, and incident response.

• Ensure the platform remains safe and trustworthy, with a focus on security and user confidence.

• Take initiative to resolve issues affecting users and developers, ranging from minor bugs to major incidents.

• Collaborate with designers, product managers, QA, and community contributors to implement comprehensive improvements.

• Engage in open contributions through pull requests, code reviews, and discussions.

• Work on:

• Full stack development: React/TypeScript frontends, Django backend, MySQL datastore.

• Platform reliability: deployments, monitoring, and incident response on Google Cloud.

• Feature development: submission flows, trust and safety signals, and modernization of DevHub and Reviewer tools.

• Ecosystem moderation: managing abuse reports, ensuring policy compliance, and maintaining ecosystem safety.

• Open collaboration: We operate transparently, with contributions from both Mozilla staff and community members.

⛳️ Requirements

• Proven experience in building modern web applications.

• Strong expertise in Python/Django or comparable backend frameworks.

• Knowledge of web security principles and practices.

• Excellent collaboration and communication skills within a distributed team setting.

• Skilled at navigating ambiguity, exploring solutions, and influencing direction in novel problem areas.

• Commitment to our core values:

• Embracing diversity

• Being relationship-oriented

• Practicing responsible participation

• Demonstrating resilience

• Bonus points for:

• Experience in developing automated security systems.

• Familiarity with cloud infrastructure (Google Cloud or similar).

• Contributions to open-source projects.

• Experience with policy-compliant ecosystem moderation tools.

🏝️ Benefits

• Competitive performance-based bonus plans for all eligible employees - we share in our success as a unified team.

• Comprehensive medical, dental, and vision coverage.

• Generous retirement contributions with 100% immediate vesting (regardless of personal contributions).

• Quarterly company-wide wellness days where everyone takes a break together.

• Country-specific holidays plus an additional day off for your birthday.

• One-time home office setup stipend.

• Annual budget for professional development.

• Quarterly allowance for well-being expenses.

• Substantial paid parental leave.

• Employee referral bonus program.

• Additional benefits (life/AD&D, disability, EAP, etc. - varies by country).