Senior Security Engineer, Bug Bounty

Mozilla is hiring a Senior Security Engineer, Bug Bounty in the UK for a senior level position operating within the healthcare sector. As part of our non-profit-backed technology organization, you will own, scale, and administer the Mozilla Web Bug Bounty program while collaborating with product and SIRT teams to drive effective risk mitigation and vulnerability remediation.

Key Responsibilities

• Act as the primary interface with external researchers and platforms like HackerOne, driving triage and technical validation.
• Perform targeted code reviews, primarily in JavaScript and Python, during active investigations and high-risk changes.
• Identify root causes and influence long-term improvements in secure development practices.

Candidate Requirements

• 3+ years of demonstrated experience in a security engineering role, including bug bounty operations or bug hunting.
• A Bachelors degree.
• Practical experience working with modern cloud technologies such as Amazon Web Services, Google Cloud Platform, Heroku, and Microsoft Azure.
• Strong software development background and solid communication skills.

Salary and Benefits

This role offers a salary of £66,000. Additional benefits include performance-based bonuses, medical, dental, and vision coverage, generous retirement contributions with 100% immediate vesting, quarterly wellness days, a birthday off, a home office stipend, an annual professional development budget, and paid parental leave.