Staff Security Engineer, Mozilla
$138-217k
Salary dependent on location
Designs, builds, and distributes internet software
Open for applications
Designs, builds, and distributes internet software
1001+ employees
Open for applications
$138-217k
Salary dependent on location
1001+ employees
Company mission
To make sure that the internet remains accessible, open, and transparent to everyone.
Role
Who you are
- Experience assessing security risks, presenting security topics to technical and nontechnical teams
- Ability to analyze software and system design to identify security vulnerabilities using knowledge of state of the art vulnerabilities and attack techniques
- Technical expertise and experience with designing and building tooling to scale and automate processes your influence and impact
- Outstanding interpersonal skills to partner with teams across the organization and support them in reducing their risk
- 7+ years of demonstrated ability in a security consulting or architecture role
- Practical experience with the following technologies:
- Identity and Access Management
- Mobile Device / Application Management
- Data Loss Prevention
- Endpoint Detection and Response
- Practical experience securing SaaS applications such as but not limited to: Google Workspace, Box, Slack, Workday, Jira and Confluence)
- Experience securing cloud technologies such as Google Cloud, Amazon Web Services and Azure
- Strong written and verbal skills; ability to work effectively with diverse company partners
- Real-world experience in software development and/or engineering operations; B.S. in technology focused fields is helpful
- Competencies
- Ownership and Accountability
- Autonomy
- High Level of Integrity
- Clear Communication
- Creative Problem Solver
- Passionate about Security
What the job involves
- Mozilla is looking for a staff security engineer to assist with the design and architecture of security controls and risk reduction activities across all Mozilla product, service and support departments
- Most importantly, you will assist the team responsible for ensuring the integrity of Mozilla’s enterprise and products and for keeping Mozilla’s users safe, within a company dedicated to building a more secure internet
- Lead enterprise security control design and architecture across Mozilla SaaS applications and enterprise security tooling
- Conduct risk assessments and security reviews for SaaS and custom-developed applications and services
- Collaborate with security leadership on security strategy and prioritization of security projects
- Coordinate with Security Incident Response Team on incident retrospectives and follow up on security remediation
- Security Strategy and Governance
- Develop and implement cybersecurity strategies, policies, and frameworks aligned with organizational goals and regulatory requirements
- Conduct periodic corporate risk assessments and recommend measures to address identified vulnerabilities
- Internal Consulting
- Act as a subject matter expert for internal teams, providing guidance on securing SaaS applications, infrastructure hardening, and data protection
- Review and approve security controls in project designs and deployments
- Regulatory Compliance
- Ensure compliance with Mozilla security standards, such as NIST, GDPR, and other relevant regulations
- Support audits, certifications, and assessments
- Technology Assessment
- Evaluate and recommend new security technologies, tools, and methodologies to strengthen the organization's cybersecurity posture
- Collaborate with IT and business units to assess and integrate security solutions
- Training and Awareness
- Assist in development or acquisition of training sessions for employees to enhance cybersecurity awareness across the organization
- Provide mentorship to junior cybersecurity staff
- Reporting and Communication
- Provide detailed reports and dashboards on the organization's security status to senior leadership
- Communicate complex technical information to non-technical stakeholders effectively
Our take
Mozilla creates and manages a range of free-to-use software products. Their most well-known product is Firefox, the fourth most popular internet browser in the world. Mozilla is a not-for-profit with a focus on promoting online privacy. The company has a published manifesto outlining its commitment to keeping a balance between commercial profit and public benefit.
The companies other products include Bugzilla, a bug management platform, and Pocket, an award-winning digital content filing service. In direct odds with Google, Mozilla has recently launched a new product Mozilla VPN. The VPN or virtual private network enables users to browse the internet without being tracked. Companies such as Google rely on tracking user behavior online to target them with advertising.
Mozilla was also instrumental in creating the programming language Rust, which is admired for its brevity. Rust uses roughly half the amount of code as C++ to produce the same results.
Freddie
Company Specialist at Welcome to the Jungle
Insights
12% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
Apr 2018
$1.2m
GRANT
Jan 2005
$0.3m
ANGEL
Total funding: $3.5m
Company benefits
- Health, Dental, and Vision Insurance
- Life Insurance + Accidental Death & Dismemberment
- Short-Term Disability and Long-Term Disability Insurance
- Employee Assistance Program (EAP)
- Retirement Plan contributions
- 20 Paid Time Off days per year (prorated) + your birthday
- Company Holidays + Shutdown
- Wellness budget
- Reimbursement for professional development (up to $3,000/year)
- Industry-leading paid parental leave (up to 26 weeks of fully paid leave for childbearing parents and up to 12 weeks for non-childbearing parents)
- Flexible work environment (nearly half of Mozillians work remotely)
- A work setup including the latest hardware and software of your choice
Company HQ
Rincon Hill, San Francisco, CA
Leadership
Mitchell Baker
(CEO & Chairwoman)Mitchell worked as a lawyer and at Netscape Communications before co-founding Mozilla in 2003. They have served as Chairwoman of Mozilla Foundation since then, and CEO as of April 2020.
Share this job
View 50 more jobs at Mozilla