Senior Security Engineer at Mozilla

Job Description

Mozilla Corporation is the non-profit-backed technology company behind pioneering brands like Firefox, the privacy-minded web browser, and Pocket, the content discovery platform. More than 270 million people around the world use its products each month.

Along with 20,000+ volunteer contributors and collaborators all over the world, Mozilla Corporation’s staff are driven by our vision to be the trusted guide through a joyful internet. We design, build and distribute software that enables people to enjoy the internet on their terms.

Working closely with partners across IT, Site Reliability Engineering (SRE), along with other departments across Mozilla, the Security Engineer ensures that systems and services are secured through the implementation of technical and administrative security controls.

As a Security Engineer at Mozilla, you will

Protect the services our products like Firefox, Mozilla VPN, Pocket, etc depend on from attacks and abuses
Design, build and deploy security frameworks such as cloud security, intrusion detection, vulnerability and patch management, application security services, system hardening, etc.
Design, review and improve the security controls of the organization
Write, maintain, and expand security automation and monitoring tools
Work with developers and operations across the organization to keep infrastructure safe
Translate technical and administrative security controls into platform security standards.
Define, refine, publish and evangelize the resulting cost effective security standards, ensuring accurate translation into platform configurations.
Continually work to improve Mozilla’s security posture by partnering and supporting other parts of the cybersecurity organization.
Successful candidates will have meaningful experience in one or more areas like GCP/AWS/Azure cloud security techniques, data security methodologies, vulnerability management and have extensive experience with security in all varieties of infrastructure.

You will be hardening and guiding recommendations for Mozilla’s systems and networks, infrastructure, application security services, and company assets, while ensuring the mission of privacy and security is upheld at all times. This is a hands-on role, and you will collaborate with other teams to guide proper security practices throughout the company.

Your Professional Profile:

3+ years of relevant hands-on experience in a cybersecurity domain designing, publishing and building security practices.
3+ years of experience translating technical and administrative security controls into actionable platform configurations.
3+ years of experience managing cybersecurity lifecycle management.
3+ years of experience in any cybersecurity domain(s).
You will need:

Strong infrastructure security knowledge, from high level architectural concepts down to the implementation.
Security architecture background and experience, public cloud and on-premise.
Cloud Architecture background
Experience with Terraform
Experience securing large-scale deployments in major cloud stacks (AWS, GCP, or Azure), including automating controls and use of API functions.
A significant role in the operation of vulnerability management
Development skills primarily in Python and Go. You should feel comfortable operating the services for the code you write and documenting it for others.
Log aggregation and analysis techniques, and you’re familiar with the concepts of common SIEM technology such as Splunk.
A B.S. in Computer Science or relevant certifications would be lovely, but passion, curiosity, and real-world experience are preferred.
Experience in ensuring compliance with CIS benchmarks