Join Mozilla's Governance, Risk & Compliance team to maintain and mature the ISMS, support ISO 27001 and SOC 2 Type 2 audits, lead security policy programs, track gaps and remediation, and partner with engineering, legal, privacy, and product teams. Role requires ~5 years' experience in information security/GRC and hands-on familiarity with ISO 27001 and SOC 2. Listed US salary ranges: $139,000–$218,000 USD annually (tiers shown in posting).

Maintain and mature Mozilla's ISMS (SoA, risk treatment plans, management review cadence), lead security policy creation and review cycles, support ISO 27001 and SOC 2 Type 2 audit execution and evidence collection, track gaps and remediation, and partner with engineering, legal, privacy, and people teams. Requires ~5 years of information security/GRC experience and hands-on involvement with ISO 27001 and SOC 2 audits.

Role within Mozilla's Governance, Risk & Compliance team to manage and advance the ISMS (SoA, risk treatment, MRMs), support ISO 27001 and SOC 2 Type 2 audits (scope, evidence, auditor interviews), lead the security policy program, and track remediation efforts. Requires ~5 years' experience in information security/GRC with deep familiarity with ISO 27001 and SOC 2. Hiring range for Remote Germany: €81,000–€108,000 EUR.

Remote (France) role within Mozilla’s Security GRC function focused on ISMS maintenance (SoA, risk treatment plans, Management Review), supporting ISO 27001 and SOC 2 Type 2 audits (scope, evidence, auditor interviews), policy program leadership, internal audit support, remediation tracking, and partnering with engineering, legal, privacy, and people teams. Requires ~5 years’ experience in information security/GRC and hands-on familiarity with ISO 27001 and SOC 2.

Remote (Canada) Staff Security Engineer role within Mozilla's Governance, Risk & Compliance function. Responsibilities include ISMS maintenance (SoA, risk treatment plans, MRMs), supporting ISO 27001 and SOC 2 Type 2 audits, policy program leadership, internal audit support, and cross-functional coordination to drive control ownership and remediation. Requires ~5 years of experience in information security/GRC and hands-on familiarity with ISO 27001 and SOC 2.

Lead ISMS maintenance and maturity, support ISO 27001 and SOC 2 Type 2 audit execution (scope, evidence, auditor interactions), run the security policy program, track gaps and remediation, support internal audits, and partner with engineering, legal, privacy, and product teams. Requires ~5 years in information security/GRC with deep familiarity with ISO 27001 and SOC 2.

Remote (Germany) role to manage Mozilla’s web bug bounty program, act as primary interface with external researchers and platforms (e.g., HackerOne), lead triage and technical validation across intake channels, drive end-to-end remediation with engineering teams, collaborate with the Security Incident Response Team, and perform targeted JavaScript and Python code reviews. Requires 3+ years in a security engineering role and experience with bug bounty operations and modern cloud platforms.

The role owns Mozilla’s web bug bounty program (strategy, KPIs, researcher relations), leads triage and technical validation across intake channels (HackerOne, Bugzilla, email), drives end-to-end vulnerability remediation with engineering teams, collaborates with the Security Incident Response Team on incidents and post-incident reviews, performs targeted code reviews (primarily JavaScript and Python), and develops or leverages tooling to improve triage and program insights. Requires 3+ years in a security engineering role and experience with cloud platforms.

Mozilla seeks a Senior Security Engineer to own the Mozilla Web Bug Bounty program, act as the primary interface with external researchers (e.g., HackerOne), lead triage and technical validation across intake channels (HackerOne, Bugzilla, email), collaborate with SIRT on incidents, perform targeted code reviews (primarily JavaScript and Python), and develop tooling to improve triage and program insights. Requires 3+ years in a security engineering role and experience with cloud platforms.

Mozilla is hiring a Senior Security Engineer to manage the Mozilla Web Bug Bounty program, act as primary interface with external researchers/platforms (e.g., HackerOne), lead triage and technical validation across intake channels, drive end-to-end remediation with engineering teams, collaborate with SIRT on incidents, and perform targeted code reviews (primarily JavaScript and Python). Requires 3+ years in a security engineering role and experience with bug bounty programs and modern cloud technologies.

Senior Security Engineer responsible for owning and scaling Mozilla’s web bug bounty program (HackerOne and other intake channels), leading triage and technical validation of reports, driving end-to-end vulnerability remediation, performing targeted code reviews (primarily JavaScript and Python), collaborating with the Security Incident Response Team on incidents, and improving tooling and processes. Requires 3+ years in security engineering and experience with bug bounty programs and modern cloud technologies.

Remote role (Spain) to deliver features and architectural improvements across the Add-ons stack (DevHub, Reviewer tools, automated moderation). Requires full‑stack development with React/TypeScript frontends and Python/Django backends, plus work on observability, deployments and incident response on Google Cloud. Senior-level collaboration in an open-source environment.

Mozilla is hiring a Senior Software Engineer for Firefox Security to advance Firefox's security architecture and cryptography stack (including cryptographic protocols and WebPKI), design and implement web platform security features, and improve stability, performance, and memory efficiency in a multi-threaded browser. Role requires strong C/C++ proficiency, security fundamentals, debugging skills, and familiarity or interest in Rust. Position is remote (UK) with a stated hiring range of £66,000–£87,000 GBP.

Work on Firefox's security architecture and cryptography stack, including cryptographic protocols, WebPKI, and security-sensitive web APIs. Design and implement web platform security features, improve browser reliability/performance in a multi-threaded native codebase, collaborate across teams on security initiatives, and contribute to technical design and standards-based implementations. Requires strong C/C++ skills, security fundamentals, debugging and systems programming experience; Rust familiarity is a plus.

Work on Firefox security architecture and cryptography stack (cryptographic protocols, WebPKI, security-sensitive web APIs), design and implement web platform security features, improve browser reliability/performance/memory in a multi-threaded native codebase, and collaborate across teams. Requires strong software engineering fundamentals, proficiency in C/C++, familiarity with Rust, and experience debugging cross-platform native applications.

Mozilla is hiring a Senior Software Engineer for Firefox Security to advance Firefox's security architecture and cryptography stack (including WebPKI and PKI evolution), design and implement web platform security features, improve browser reliability/performance, and collaborate on security initiatives. Role expects strong C/C++ skills, familiarity or interest in Rust, multi-threaded and cross-platform debugging, and experience with cryptographic protocols. Salary range for Remote Spain: €58,000–€77,000.

Work on Firefox's security architecture and cryptography stack, design and implement web platform security features, improve browser reliability, performance, and memory efficiency, and collaborate with distributed teams. Role emphasizes C/C++ proficiency, familiarity with Rust, and experience with cryptography and multi-threaded native applications.

Work on Firefox's security architecture and cryptography stack, design and implement web platform security features, and improve browser reliability, performance, and memory efficiency. Role emphasizes C/C++ proficiency, familiarity with Rust, multi-threaded and cross-platform native development, and applied cryptographic/security knowledge while collaborating across distributed teams.

Work on Firefox's security architecture and cryptography stack (including WebPKI and PKI evolution), design and implement web platform security features, and improve browser reliability, performance, and memory usage. Requires strong software engineering skills (C/C++), security fundamentals, debugging of multi-threaded native applications, and familiarity or interest in Rust and web technologies.

Work on Firefox's security architecture and cryptography stack (cryptographic protocols, WebPKI, security-sensitive web APIs); design and implement web platform security features; improve browser reliability, performance, and memory efficiency in a multi-threaded, cross-platform codebase. Requires strong software engineering skills with proficiency in C/C++, familiarity or interest in Rust, debugging, and security fundamentals.