Senior Security Engineer, Mozilla
Infrastructure Security
$116-182k
Salary dependent on location + Generous performance-based bonus plans to all eligible employees
Designs, builds, and distributes internet software
Be an early applicant
Designs, builds, and distributes internet software
1001+ employees
Be an early applicant
$116-182k
Salary dependent on location + Generous performance-based bonus plans to all eligible employees
1001+ employees
Company mission
To make sure that the internet remains accessible, open, and transparent to everyone.
Role
Who you are
- Successful candidates will have meaningful experience in one or more areas like GCP/AWS/Azure cloud security techniques, data security methodologies, vulnerability management and have extensive experience with security in all varieties of infrastructure
- 3+ years of relevant hands-on experience in a cybersecurity domain designing, publishing and building security practices
- 3+ years of experience translating technical and administrative security controls into actionable platform configurations
- 3+ years of experience in any cybersecurity domain(s)
- A B.S. in Computer Science or relevant certifications would be lovely, but passion, curiosity, and real-world experience are preferred
- Strong infrastructure security knowledge, from high level architectural concepts down to the implementation
- Experience securing large-scale deployments in major cloud stacks (AWS, GCP, or Azure), including automating controls and use of API functions
- Security architecture background and experience, public cloud and on-premise
- Proficiency in using Terraform and Github Actions to automate the deployment and security configuration of infrastructure
- Experience with CNAPP / CSPM / CWPP solutions
- Experience with Web Application Firewalls
- Experience with Container Security (understanding how to secure containerized applications)
- Experience in vulnerability management
- Experience working with DevOps or SRE teams to improve security within CI/CD pipelines
- Development skills primarily in Python and Go. You should feel comfortable operating the services for the code you write and documenting it for others
- Log aggregation and analysis techniques, and you're familiar with the concepts of common SIEM technology such as Splunk
- Experience in ensuring compliance with CIS benchmarks
- Soft skills (patience, communication skills, cross-functional teamwork, remote working)
- Writing documentation and proposals “skills”
- Experience work tracking in JIRA
- Interest in and ability to work with a distributed team (requires good asynchronous written communication skills as well as good verbal communication skills)
- Happy to provide and receive constructive feedback
- Will contribute by asking questions and proposing new ideas
- A love of working with others collaboratively
- Commitment to our values:
- Welcoming differences
- Being relationship-minded
- Practicing responsible participation
- Having grit
What the job involves
- We are looking for security practitioners to reduce risk in our systems and applications, and ensure our products live up to Mozilla’s dedication to privacy and a joyful Internet
- Working closely with partners across Site Reliability Engineering (SRE), IT, and along with other departments across Mozilla, the Security Engineer ensures that systems and services are secured through the implementation of technical and administrative security controls
- As a Senior Security Engineer, you will be hardening and guiding recommendations for Mozilla’s systems and networks, infrastructure, application security services, and company assets, while ensuring the mission of privacy and security is upheld at all times
- This is a hands-on role, and you will collaborate with other teams to guide proper security practices throughout the company
- Protect the services our products like Firefox, Pocket, etc depend on from security risks and attacks
- Design, implement, and maintain tooling, systems and processes for securing our cloud infrastructure
- Design, review and improve the security controls of the organization
- Write, maintain, and expand security automation and monitoring tools
- Work with developers and operations across the organization to keep infrastructure safe
- Work with cross functional teams, building relationships and fostering collaboration to reach shared goals
- Continually work to improve Mozilla’s security posture by partnering and supporting other parts of the cybersecurity organization as well as contributing to improving security practices and procedures
- Help to level-up the skills of your fellow engineers through security reviews, giving talks and presentations, and/or writing documentation
- Work with driven, committed team members to bring the open web to people around the world
Our take
Mozilla creates and manages a range of free-to-use software products. Their most well-known product is Firefox, the fourth most popular internet browser in the world. Mozilla is a not-for-profit with a focus on promoting online privacy. The company has a published manifesto outlining its commitment to keeping a balance between commercial profit and public benefit.
The companies other products include Bugzilla, a bug management platform, and Pocket, an award-winning digital content filing service. In direct odds with Google, Mozilla has recently launched a new product Mozilla VPN. The VPN or virtual private network enables users to browse the internet without being tracked. Companies such as Google rely on tracking user behavior online to target them with advertising.
Mozilla was also instrumental in creating the programming language Rust, which is admired for its brevity. Rust uses roughly half the amount of code as C++ to produce the same results.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Few candidates hear
back within 2 weeks
12% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
Apr 2018
$1.2m
GRANT
Jan 2005
$0.3m
ANGEL
Total funding: $3.5m
Company benefits
- Health, Dental, and Vision Insurance
- Life Insurance + Accidental Death & Dismemberment
- Short-Term Disability and Long-Term Disability Insurance
- Employee Assistance Program (EAP)
- Retirement Plan contributions
- 20 Paid Time Off days per year (prorated) + your birthday
- Company Holidays + Shutdown
- Wellness budget
- Reimbursement for professional development (up to $3,000/year)
- Industry-leading paid parental leave (up to 26 weeks of fully paid leave for childbearing parents and up to 12 weeks for non-childbearing parents)
- Flexible work environment (nearly half of Mozillians work remotely)
- A work setup including the latest hardware and software of your choice
Company values
- We welcome differences
- We are relationship-minded
- We practice responsible participation
- We have grit
Company HQ
Rincon Hill, San Francisco, CA
Articles
Leadership
Mitchell Baker
(CEO & Chairwoman)Mitchell worked as a lawyer and at Netscape Communications before co-founding Mozilla in 2003. They have served as Chairwoman of Mozilla Foundation since then, and CEO as of April 2020.
Share this job
View 27 more jobs at Mozilla