Overview As an Incident Responder at Mozilla, you will monitor, detect and mitigate security incidents across Mozilla’s products globally. You’ll act as incident commander, driving responses through a full lifecycle and shaping playbooks for 24/7 readiness. You’ll conduct threat hunting, research threat intel, and collaborate with diverse stakeholders to improve preparedness and containment. This role supports Mozilla’s mission to keep users safe and build a more secure internet through proactive defense and cross-functional partnership.

Compensaciones / Beneficios

generous performance-based bonus plans medical, dental, and vision coverage retirement contributions with 100% immediate vesting quarterly all-company wellness days home office stipend professional development budget

Responsabilidades

Identify and respond to security incidents on a general scale Act as incident commander to drive incidents through the full response lifecycle Design and maintain alerts, automations, playbooks,



and escalation workflows for 24/7 incident response Conduct threat hunting and develop forward-looking defense strategies Research threat intelligence and manage resulting workflows Collaborate with stakeholders to continuously improve preparation, identification, analysis, containment, and post-mortem activities Participate in on-call rotation

Requisitos principales

5+ years of security incident experience at a global scale or in SOC/PSIRT/CSIRT environments Experience with SIEM systems (e.g., ELK, Google BigQuery, Splunk); Splunk proficiency preferred Experience with endpoint detection and investigation using EDR tools Experience with SOAR platforms (e.g., Tines or Splunk SOAR) Strong communication and leadership abilities to partner with diverse stakeholders Background in software development or engineering operations for consumer products; BS in a tech field is helpful Hands-on cloud experience (e.g., GCP, AWS, Heroku, Azure) Clear communication Leadership Collaborative mindset Security information and event management (SIEM) Splunk, ELK, Google BigQuery Endpoint detection and investigation (EDR) tools

📌 Senior Security Engineer - SecOps - españa (Madrid)
🏢 Mozilla
📍 Madrid