Overview

As an Incident Responder at Mozilla, you will monitor, detect and mitigate security incidents across Mozilla’s products globally. You’ll act as incident commander, driving responses through a full lifecycle and shaping playbooks for 24/7 readiness. You’ll conduct threat hunting, research threat intel, and collaborate with diverse stakeholders to improve preparedness and containment. This role supports Mozilla’s mission to keep users safe and build a more secure internet through proactive defense and cross-functional partnership.

Compensaciones / Beneficios

- generous performance-based bonus plans
- medical, dental, and vision coverage
- retirement contributions with 100% immediate vesting
- quarterly all-company wellness days
- home office stipend
- professional development budget

Responsabilidades

- Identify and respond to security incidents on a general scale
- Act as incident commander to drive incidents through the full response lifecycle
- Design and maintain alerts, automations, playbooks, and escalation workflows for 24/7 incident response
- Conduct threat hunting and develop forward-looking defense strategies




- Research threat intelligence and manage resulting workflows
- Collaborate with stakeholders to continuously improve preparation, identification, analysis, containment, and post-mortem activities
- Participate in on-call rotation

Requisitos principales

- 5+ years of security incident experience at a global scale or in SOC/PSIRT/CSIRT environments
- Experience with SIEM systems (e.g., ELK, Google BigQuery, Splunk); Splunk proficiency preferred
- Experience with endpoint detection and investigation using EDR tools
- Experience with SOAR platforms (e.g., Tines or Splunk SOAR)
- Strong communication and leadership abilities to partner with diverse stakeholders
- Background in software development or engineering operations for consumer products; BS in a tech field is helpful
- Hands-on cloud experience (e.g., GCP, AWS, Heroku, Azure)

- Clear communication
- Leadership
- Collaborative mindset
- Security information and event management (SIEM)
- Splunk, ELK, Google BigQuery
- Endpoint detection and investigation (EDR) tools

📌 Senior Security Engineer - SecOps (España)
🏢 Mozilla
📍 España