Lead security architecture and operations for Mozilla's open internet products, building secure-by-design systems and mentoring engineering teams.

Mozilla Corporation is dedicated to a healthy, open internet. We are seeking a Staff Security Engineer to join our global security team and lead efforts to protect our products, infrastructure, and users. You will design and implement security architectures, perform threat modeling, and drive incident response improvements. This role offers the opportunity to work across diverse teams including engineering, product, and operations to embed security into every layer of Mozilla’s ecosystem.

Key Responsibilities:

• Develop and maintain security standards, policies, and procedures for Mozilla’s cloud and on-premise environments.
• Lead security reviews of new features and services, performing risk assessments and penetration testing.
• Collaborate with engineering teams to integrate security into the software development lifecycle (SDLC).
• Design and deploy automated security tools for monitoring, detection, and response.
• Mentor junior security engineers and advocate for security best practices across the organization.
• Participate in on-call rotations for security incidents and lead post-incident analysis.

• Experience: 7+ years in information security, with at least 3 years in a staff or lead role.
• Technical Skills: Deep knowledge of cloud security (AWS/GCP), network security, authentication protocols (OAuth, SAML), and encryption.
• Programming: Proficiency in Python, Go, or Rust for automation and tooling.
• DevSecOps: Experience with CI/CD security scanning, container security (Docker, Kubernetes), and infrastructure-as-code (Terraform).
• Communication: Strong ability to explain complex security issues to non-technical stakeholders.
• Certification: Relevant security certifications (CISSP, OSCP, etc.) preferred.
• Language: Fluent in English; French is a plus.

• Comprehensive Health Coverage: Medical, dental, and vision insurance for you and your dependents.
• Generous Time Off: Unlimited PTO, paid holidays, and paid parental leave.
• Professional Development: Annual budget for conferences, certifications, and training.
• Remote Work Stipend: Monthly allowance for home office setup, internet, and utilities.
• Wellness Programs: Access to mental health resources, gym memberships, and wellness apps.
• Stock Options: Equity grants to share in Mozilla's success.