Senior Security Engineer, Bug Bounty

New

MozillaTechnology, Web Browser

Location: Remote CanadaFull-TimeSenior

SalaryCanada Tier 1 Locations: $104,000 – $139,000 CAD; Canada Tier 2 Locations: $95,000 – $126,000 CAD

Apply NowOpens the employer's application page

Job Details

3+ years of demonstrated ability in a security engineering role
Experience operating bug bounty programs, including enhancements, automation and scaling, and/or bug hunting
Practical experience working with modern cloud technologies (e.g., AWS, GCP, Heroku, Azure)
Experience analyzing code and systems to move from vulnerability to root cause to prevention
Real-world experience in software development and/or engineering operations
Strong communication, collaboration, and problem-solving skills, with the ability to influence and guide cross-functional teams
Ability to develop tools in languages such as Python, Go, Rust, or JavaScript is a plus

Own and scale Mozilla’s web bug bounty program, including strategy, prioritization, KPIs, and continuous improvement
Act as the primary interface with external researchers and platforms (e.g., HackerOne), fostering a high-quality and trusted research community
Lead triage and technical validation of incoming reports across multiple intake channels (HackerOne, Bugzilla, email)
Drive end-to-end vulnerability remediation, partnering with engineering teams to ensure timely, effective fixes
Identify root causes and systemic issues, and influence long-term improvements in secure development practices
Collaborate with the Security Incident Response Team (SIRT) on active incidents and post-incident reviews
Perform targeted code reviews (primarily JavaScript and Python) during investigations and high-risk changes
Develop or leverage tooling to improve triage efficiency, signal quality, and program insights

View Full Description & ApplyYou'll be redirected to the employer's site