Work on Mozilla's Release Engineering team to write scalable software that builds, tests, and releases Firefox; improve developer experience; maintain and optimize CI/CD pipelines and build/deploy automation. Requires 2+ years OOP experience (preferably Python), familiarity with cloud providers (AWS/GCP/Azure), cross-platform development (Windows/macOS/Linux), shell scripting, and experience on distributed teams.

Join Mozilla's Release Engineering team to help optimize and maintain build, test, and release pipelines for Firefox. Responsibilities include writing scalable software, improving developer experience, collaborating across North America and Europe, performing code reviews, and responding to critical service outages during working hours. Requires a bachelor's degree or equivalent, a minimum of 2 years working in an OOP language (preferably Python), experience with CI/CD and cloud resources (AWS/GCP/Azure), and comfort developing on Windows, macOS, and Linux.

Staff-level GRC role responsible for advancing the Information Security Management System (ISMS), supporting ISO 27001 and SOC 2 Type 2 audits (scope, evidence, interviews, findings), driving security policy creation and review cycles, tracking remediation, and partnering with engineering, legal, privacy, and other teams. Requires ~5 years of information security/GRC experience and hands-on involvement with ISO 27001 and SOC 2.

Staff-level Security GRC Engineer responsible for ISMS maintenance (SoA, risk treatment plans, MRMs), supporting ISO 27001 and SOC 2 Type 2 audit execution and readiness, leading security policy program, tracking remediation, partnering with engineering, legal, privacy and product teams, and advising security leadership. Requires ~5 years in information security/GRC and hands-on ISO 27001 and SOC 2 experience.

Role in Mozilla's Governance, Risk & Compliance team to maintain the ISMS (SoA, risk treatment plans, management review), support ISO 27001 and SOC 2 Type 2 audits (scope, evidence, auditor interviews), lead policy program, track remediation, and partner with Engineering, IT, Legal, Privacy and People. Requires ~5 years' experience in information security/GRC and hands-on ISO 27001 and SOC 2 involvement.

Responsible for maintaining and maturing Mozilla's ISMS (SoA, risk treatment, Management Review), supporting ISO 27001 and SOC 2 Type 2 audit execution and readiness, leading the security policy program, tracking gaps and remediation, and partnering across Engineering, Legal, Privacy, People and product teams. Role requires ~5 years' experience in information security/GRC with hands-on involvement in ISO 27001 and SOC 2 audits.

Role within Mozilla's Governance, Risk & Compliance function to maintain and advance the ISMS (SoA, risk treatment plans, MRM), support ISO 27001 and SOC 2 Type 2 audits, lead policy creation and review cycles, track remediation, and partner with engineering, IT, legal, privacy and product teams. Requires ~5 years' experience in information security/GRC, deep familiarity with ISO 27001 and SOC 2, policy authorship, audit readiness and cross-functional collaboration.

Role within Mozilla's Security GRC function to maintain the ISMS (SoA, risk treatment plans, Management Review Meetings), support ISO 27001 and SOC 2 Type 2 audits (scope, evidence, auditor interactions), lead policy creation and review cycles, track gaps and remediation, support internal audits, and partner with engineering, legal, privacy, and product teams. Requires ~5 years of information security/GRC/compliance experience and deep familiarity with ISO 27001 and SOC 2.

Hands-on role designing, building, and maintaining scripts, APIs, integrations and agentic AI workflows connecting collaboration tools (Google Workspace, Slack, Zoom, Atlassian) and identity platforms (Okta). Requires ~4–6 years experience, proficiency in scripting/programming (e.g., Java, Go, Python, JavaScript, Bash, PowerShell), familiarity with RESTful APIs, CI/CD, monitoring/observability, and interest or experience with LLMs and automation of IAM/provisioning workflows. Remote (Canada).

Hands-on role designing, building, and maintaining scripts, APIs, integrations, and automations for workplace systems (Google Workspace, Slack, Zoom, Atlassian) and identity platforms (Okta). Responsibilities include integrating LLMs and agents, implementing monitoring/observability, automating onboarding/offboarding and access workflows, and collaborating with IT, Security, and People teams to embed compliance and guardrails.

Remote senior software/application engineer role within Mozilla's IT Workplace Technology team. Responsibilities include designing and maintaining scripts, APIs, and automations for collaboration tools (Google Workspace, Slack, Zoom, Atlassian) and identity platforms (Okta), integrating LLMs/agents, implementing monitoring and observability, and improving onboarding/provisioning workflows. Requires ~4–6 years experience and proficiency in scripting, RESTful APIs, and SaaS integrations.

Full-time, fully remote Senior Software Engineer (iOS) role focused on designing, developing, and improving Thunderbird’s iOS application. Responsibilities include building mobile architecture, improving performance and reliability, testing, debugging, code review, security and accessibility work, and collaborating with product, UX, and open-source contributors. Position is targeted to residents of Canada, offers a CAD salary range of 108,000–125,000, and does not provide visa sponsorship.

Full-time, fully remote (US) Senior Software Engineer, iOS role at MZLA/Thunderbird to contribute to and improve the iOS application’s architecture, performance, reliability, security, and accessibility. Requires 7+ years professional software development (including 2+ years at senior level), strong Swift/SwiftUI skills, mobile app development and security experience, and familiarity with email/communication protocols.

Full-time remote Senior Software Engineer (iOS) to contribute deep iOS expertise to Thunderbird’s mobile product: build and refine architecture, improve performance, reliability, security, and maintainability, collaborate with product/UX and the open-source community. Requires 7+ years professional software development (including 2+ years senior), 3+ years mobile experience, strong Swift/SwiftUI skills, and experience with testing, debugging, Git, and mobile security.

MZLA/Mozilla is hiring a remote Staff Designer (design engineering / UX engineering) to create functional prototypes and production front-end experiences for Thunderbolt. The role requires 10+ years' relevant experience, strong JavaScript/TypeScript and component-based front-end skills, experience with AI-enabled product experiences, and expertise in usability, accessibility, and enterprise considerations. The position is full-time, permanent, and open to candidates in the US and Canada; visa sponsorship is not provided.

Work as a senior backend engineer building and owning server-side systems and integrations for Mozilla Ecosystem Services. Responsibilities include end-to-end service ownership (development, deployment, monitoring, on-call support), collaborating with frontend, CloudEng, and product partners, and using observability tools (OpenTelemetry, Sentry, Prometheus, Grafana). Tech stack examples: Python, TypeScript/Node.js, Rust, PostgreSQL, GCP, Docker.

Senior backend role on Ecosystem Services at Mozilla: design, build, deploy, and operate backend platforms that power Mozilla products (e.g., privacy services, AutoPush, Remote Settings). Responsibilities include owning services in production, participating in on-call rotations, working with CloudEng on GCP-based environments, contributing to API design, and collaborating with cross-functional teams. Required: 4+ years backend experience, proficiency in Python/TypeScript/Node.js or Rust, PostgreSQL, Docker, observability tooling (Sentry, Prometheus, Grafana), and GCP.

Remote (Germany) role to manage Mozilla’s web bug bounty program, act as primary interface with external researchers and platforms (e.g., HackerOne), lead triage and technical validation across intake channels, drive end-to-end remediation with engineering teams, collaborate with the Security Incident Response Team, and perform targeted JavaScript and Python code reviews. Requires 3+ years in a security engineering role and experience with bug bounty operations and modern cloud platforms.

The role owns Mozilla’s web bug bounty program (strategy, KPIs, researcher relations), leads triage and technical validation across intake channels (HackerOne, Bugzilla, email), drives end-to-end vulnerability remediation with engineering teams, collaborates with the Security Incident Response Team on incidents and post-incident reviews, performs targeted code reviews (primarily JavaScript and Python), and develops or leverages tooling to improve triage and program insights. Requires 3+ years in a security engineering role and experience with cloud platforms.

Mozilla seeks a Senior Security Engineer to own the Mozilla Web Bug Bounty program, act as the primary interface with external researchers (e.g., HackerOne), lead triage and technical validation across intake channels (HackerOne, Bugzilla, email), collaborate with SIRT on incidents, perform targeted code reviews (primarily JavaScript and Python), and develop tooling to improve triage and program insights. Requires 3+ years in a security engineering role and experience with cloud platforms.