Mozilla-posted about 14 hours ago
Full-time • Mid Level
Remote
501-1,000 employees

At Mozilla, we believe the internet is a global public resource—open and accessible to all. As a Staff Security Engineer, you'll protect that vision by building, breaking, and hardening products that put people’s privacy and safety first. We are looking for a security practitioner to reduce risk in applications, and ensure our products live up to Mozilla’s dedication to privacy and a joyful Internet. This position is remote-friendly and open to most locations in the US and Canada.

  • Safeguard millions of users by embedding security into Firefox, Mozilla VPN, and other mission-critical products.
  • Ensure software products are secure by embedding security into the full Software Development Life Cycle (SDLC).
  • Anticipate, prioritize and mitigate risks through proactive threat modeling, security assessments, security testing, and automation.
  • Perform security code reviews
  • Lead penetration testing on web, mobile, and embedded applications, then guide remediation efforts.
  • Develop and maintain automated security tests within CI/CD pipelines to catch vulnerabilities early.
  • Partner with engineers to integrate security throughout the software development lifecycle—not as an afterthought, but as a core design principle. Provide security guidance, develop secure solutions, and facilitate secure releases.
  • Help define and enforce security policies and provide security guidance to development teams.
  • Help shape Mozilla's security culture through collaboration, guidance, and education.
  • 5+ years of relevant hands-on experience in product and application security.
  • 5+ years of experience and proficiency in secure coding practices, application security testing (SAST, DAST), threat modeling, and vulnerability assessment.
  • Experience in one or more languages like Python, Go, Java, or JavaScript, required for automation and code review.
  • Familiarity with security tools like Burp Suite, Nessus, and tools for CI/CD automation.
  • Strong communication, collaboration, and problem-solving skills, with the ability to influence and guide cross-functional teams.
  • Formal credentials are great, but real-world experience, curiosity, passion and a builder’s mindset matter more.
  • Generous performance-based bonus plans to all eligible employees - we share in our success as one team
  • Rich medical, dental, and vision coverage
  • Generous retirement contributions with 100% immediate vesting (regardless of whether you contribute)
  • Quarterly all-company wellness days where everyone takes a pause together
  • Country specific holidays plus a day off for your birthday
  • One-time home office stipend
  • Annual professional development budget
  • Quarterly well-being stipend
  • Considerable paid parental leave
  • Employee referral bonus program
  • Other benefits (life/AD&D, disability, EAP, etc. - varies by country)
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service