Senior Security Engineer - Incident Response

Mozilla Corporation Team: Security Location: Remote Germany Mozilla is seeking an Incident Responder to monitor and mitigate attacks across Mozilla’s products and services. The role involves handling security incidents, requiring practical security experience and knowledge of current detection and response techniques. The candidate will be trusted to respond quickly and effectively, collaborating with diverse stakeholders to ensure the integrity of Mozilla’s products and user safety.

What you’ll do:

Identify and respond to security incidents globally.
Act as an incident commander managing the entire incident response lifecycle.
Design and maintain security alerts, automated actions, playbooks, and escalation workflows for a 24/7 incident response capability.
Conduct threat hunting activities, anticipate future threats, and develop strategies for tools/technology/processes against sophisticated threat actors.
Research threat intelligence reports and manage resulting workflows.
Partner with stakeholders to maintain a feedback loop for preparation, identification, analysis, containment, and post mortem activities.
Participate in on-call rotation.

Qualifications:

5+ years managing security incidents globally or experience in Security Operations Centers (SOC), Product Security Incident Response Teams (PSIRT), or Computer Security Incident Response Teams (CSIRT).
Expertise with security information and event management (SIEM) systems (e.g., ELK stack, Google BigQuery, Splunk; Splunk preferred).
Expertise with endpoint detection/investigation using leading EDR tools.
Expertise with security orchestration and automation (SOAR) platforms such as Tines or Splunk SOAR.
Strong communication and leadership skills; ability to work effectively with diverse company stakeholders.
Real-world software development or engineering operations experience; B.S. in a technology-focused field helpful.
Practical experience working with cloud technologies (Google Cloud Platform (GCP), Amazon Web Services (AWS), Heroku, Microsoft Azure).

Competencies:

Ownership and Accountability
Autonomy
High Level of Integrity
Clear Communication
Creative Problem Solver
Passionate about Security

What you’ll get:

Generous performance-based bonus plans for eligible employees - shared success as one team.
Rich medical, dental, vision coverage.
Generous retirement contributions with 100% immediate vesting regardless of employee contribution.
Quarterly all-company wellness days where everyone takes a pause together.
Country-specific holidays plus a day off for your birthday.
One-time home office stipend.
Annual professional development budget including quarterly well-being stipend.
Considerable paid parental leave benefits where applicable by country law or policy changes during employment period; employee referral bonus program; other benefits vary by country including life/AD&D insurance coverage; disability insurance coverage; Employee Assistance Program (EAP).