Senior Security Engineer, Bug Bounty

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Take ownership and expand Mozilla’s web bug bounty program, focusing on strategy, prioritization, key performance indicators (KPIs), and ongoing enhancements.

• Serve as the main liaison with external researchers and platforms (such as HackerOne), cultivating a high-quality and trustworthy research community.

• Oversee the triage and technical validation of incoming reports from various intake channels (HackerOne, Bugzilla, email).

• Lead the complete process of vulnerability remediation, collaborating with engineering teams to ensure timely and effective solutions.

• Identify root causes and systemic issues, influencing long-term enhancements in secure development practices.

• Work alongside the Security Incident Response Team (SIRT) on active incidents and conduct post-incident evaluations.

• Conduct targeted code reviews (mainly in JavaScript and Python) during investigations and high-risk modifications.

• Create or utilize tools to enhance triage efficiency, improve signal quality, and provide insights into the program.

⛳️ Requirements

• A minimum of 3 years of proven experience in a security engineering role.

• Background in managing bug bounty programs, including enhancements, automation, scaling, and/or bug hunting.

• Hands-on experience with modern cloud technologies (e.g., Amazon Web Services, Google Cloud Platform, Heroku, Microsoft Azure, etc.).

• Experience in analyzing code and systems to transition from vulnerability to root cause to prevention.

• Practical experience in software development and/or engineering operations.

• Ability to create your own tools as necessary in various programming languages (e.g., Python, Go, Rust, JavaScript, etc.) is a plus, but not mandatory.

• Excellent communication, collaboration, and problem-solving abilities, with the capability to influence and guide cross-functional teams.

• While formal credentials are valuable, real-world experience, curiosity, passion, and a growth mindset are even more important.

🏝️ Benefits

• Generous performance-based bonus plans available to all eligible employees - together, we celebrate our success as one team.

• Comprehensive medical, dental, and vision coverage.

• Generous retirement contributions with 100% immediate vesting (regardless of whether you contribute).

• Quarterly wellness days for the entire company to take a collective break.

• Country-specific holidays in addition to a day off for your birthday.

• One-time stipend for setting up a home office.

• Annual budget for professional development.

• Quarterly well-being stipend.

• Significant paid parental leave.

• Employee referral bonus program.

• Additional benefits (life/AD&D, disability, EAP, etc. - varies by country).