Specialty
The role
Mozilla is hiring a Senior Security Engineer for its SecOps team, working as an incident responder who monitors and mitigates attacks across Mozilla's products and services. The team handles security incidents with a 24/7 response capability and an on-call rotation.
What you will do
- Identify and respond to security incidents at global scale
- Act as incident commander through the full response lifecycle
- Design and maintain security alerts, automated actions, playbooks and escalation workflows for 24/7 incident response
- Run threat hunting and track emerging threats
- Triage threat intelligence reports and manage the resulting workflows
- Work with stakeholders on preparation, analysis, containment and post-mortems, and join the on-call rotation
What they ask for
- 5+ years managing security incidents at global scale, or in a SOC, PSIRT or CSIRT
- Expertise with SIEM systems such as ELK, Google BigQuery or Splunk; Splunk preferred
- Hands-on experience with EDR tools and using endpoint telemetry to find root causes
- Expertise with SOAR platforms such as Tines or Splunk SOAR
- Experience with cloud platforms such as GCP, AWS, Heroku or Azure
- Strong communication and leadership with diverse stakeholders
What they offer
- Performance-based bonus plans for eligible employees
- Retirement contributions with immediate vesting
- Quarterly company-wide wellness days
- One-time home office stipend and annual professional development budget
- Paid parental leave
This is our own short reading of the posting. The full description, and anything that has changed since, is on Mozilla's careers page behind the apply button.
