Staff Security Engineer, Product Security - Remote

Overview

The Staff Security Engineer at Mozilla will protect the vision of an open and accessible internet by embedding security into products like Firefox and Mozilla VPN, ensuring user safety and privacy.

In Short

• Safeguard users by embedding security into critical products.
• Ensure software security throughout the Software Development Life Cycle (SDLC).
• Anticipate and mitigate risks through proactive assessments and testing.
• Perform security code reviews.
• Lead penetration testing and guide remediation efforts.
• Develop automated security tests within CI/CD pipelines.
• Integrate security as a core design principle with engineering teams.
• Define and enforce security policies.
• Shape Mozilla's security culture through collaboration.

Requirements

• 5+ years of experience in product and application security.
• Proficiency in secure coding practices and application security testing.
• Experience in languages like Python, Go, Java, or JavaScript.
• Familiarity with security tools such as Burp Suite and Nessus.
• Strong communication and collaboration skills.
• Real-world experience and a builder’s mindset are valued.

Benefits

• Generous performance-based bonuses.
• Rich medical, dental, and vision coverage.
• Generous retirement contributions with immediate vesting.
• Quarterly wellness days.
• Country-specific holidays and a day off for your birthday.
• Home office stipend.
• Annual professional development budget.
• Quarterly well-being stipend.
• Considerable paid parental leave.
• Employee referral bonus program.