Staff Security Engineer, Product Security

📋 Description

• • As a Staff Security Engineer in Product Security at Mozilla, you will protect the vision of an open and accessible internet by building, breaking, and hardening products that prioritize user privacy and safety, directly impacting millions of Firefox, Mozilla VPN, and other mission-critical product users worldwide.
• • Day to day, you will embed security into the full Software Development Life Cycle (SDLC), perform threat modeling and security assessments, conduct security code reviews, lead penetration testing on web, mobile, and embedded applications, develop automated security tests in CI/CD pipelines, and partner with engineering teams to integrate security as a core design principle rather than an afterthought.
• • You will join Mozilla Corporation, a non-profit-backed technology company wholly owned by the Mozilla Foundation, dedicated to shaping the internet for people over profit, with over 225 million monthly users relying on its open-source products like Firefox and a global community of volunteers contributing to its mission.
• • In this role, you will deepen your expertise in secure coding, application security (SAST/DAST), cloud security (AWS/Azure/GCP), and automation, while influencing Mozilla’s security culture through guidance, education, and collaboration, and advancing your ability to lead security initiatives in complex, distributed systems.