Senior Security Engineer - Secops

OverviewAs an Incident Responder at Mozilla, you will monitor, detect and mitigate security incidents across Mozilla’s products globally.You’ll act as incident commander, driving responses through a full lifecycle and shaping playbooks for 24/7 readiness.You’ll conduct threat hunting, research threat intel, and collaborate with diverse stakeholders to improve preparedness and containment.This role supports Mozilla’s mission to keep users safe and build a more secure internet through proactive defense and cross-functional partnership.Compensaciones / Beneficiosgenerous performance-based bonus plansmedical, dental, and vision coverageretirement contributions with 100% immediate vestingquarterly all-company wellness dayshome office stipendprofessional development budgetResponsabilidadesIdentify and respond to security incidents on a global scaleAct as incident commander to drive incidents through the full response lifecycleDesign and maintain alerts, automations, playbooks, and escalation workflows for 24/7 incident responseConduct threat hunting and develop forward-looking defense strategiesResearch threat intelligence and manage resulting workflowsCollaborate with stakeholders to continuously improve preparation, identification, analysis, containment, and post-mortem activitiesParticipate in on-call rotationRequisitos principales5+ years of security incident experience at a global scale or in SOC/PSIRT/CSIRT environmentsExperience with SIEM systems (e.G., ELK, Google BigQuery, Splunk); Splunk proficiency preferredExperience with endpoint detection and investigation using EDR toolsExperience with SOAR platforms (e.G., Tines or Splunk SOAR)Strong communication and leadership abilities to partner with diverse stakeholdersBackground in software development or engineering operations for consumer products; BS in a tech field is helpfulHands-on cloud experience (e.G., GCP, AWS, Heroku, Azure)Clear communicationLeadershipCollaborative mindsetSecurity information and event management (SIEM)Splunk, ELK, Google BigQueryEndpoint detection and investigation (EDR) tools

This role supports Mozilla’s mission to keep users safe and build a more secure internet through proactive defense and cross-functional partnership.Compensaciones / Beneficiosgenerous performance-based bonus plansmedical, dental, and vision coverageretirement contributions with 100% immediate vestingquarterly all-company wellness dayshome office stipendprofessional development budgetResponsabilidadesIdentify and respond to security incidents on a global scaleAct as incident commander to drive incidents through the full response lifecycleDesign and maintain alerts, automations, playbooks, and escalation workflows for 24/7 incident responseConduct threat hunting and develop forward-looking defense strategiesResearch threat intelligence and manage resulting workflowsCollaborate with stakeholders to continuously improve preparation, identification, analysis, containment, and post-mortem activitiesParticipate in on-call rotationRequisitos principales5+ years of security incident experience at a global scale or in SOC/PSIRT/CSIRT environmentsExperience with SIEM systems (e.G., ELK, Google BigQuery, Splunk); Splunk proficiency preferredExperience with endpoint detection and investigation using EDR toolsExperience with SOAR platforms (e.G., Tines or Splunk SOAR)Strong communication and leadership abilities to partner with diverse stakeholdersBackground in software development or engineering operations for consumer products; BS in a tech field is helpfulHands-on cloud experience (e.G., GCP, AWS, Heroku, Azure)Clear communicationLeadershipCollaborative mindsetSecurity information and event management (SIEM)Splunk, ELK, Google BigQueryEndpoint detection and investigation (EDR) tools