OverviewAs an Incident Responder at Mozilla, you will monitor, detect and mitigate security incidents across Mozilla's products globally.

You'll act as incident commander, driving responses through a full lifecycle and shaping playbooks for 24/7 readiness.

You'll conduct threat hunting, research threat intel, and collaborate with diverse stakeholders to improve preparedness and containment.

This role supports Mozilla's mission to keep users safe and build a more secure internet through proactive defense and cross-functional partnership.

Compensaciones / Beneficiosgenerous performance-based bonus plans

medical, dental, and vision coverage

retirement contributions with 100% immediate vesting

quarterly all-company wellness days

home office stipend

professional development budget

ResponsabilidadesIdentify and respond to security incidents on a global scale

Act as incident commander to drive incidents through the full response lifecycle

Design and maintain alerts, automations, playbooks, and escalation workflows for 24/7 incident response

Conduct threat hunting and develop forward-looking defense strategies





Research threat intelligence and manage resulting workflows

Collaborate with stakeholders to continuously improve preparation, identification, analysis, containment, and post-mortem activities

Participate in on-call rotation

Requisitos principales5+ years of security incident experience at a integral scale or in SOC/PSIRT/CSIRT environments

Experience with SIEM systems (e.g., ELK, Google BigQuery, Splunk); Splunk proficiency preferred

Experience with endpoint detection and investigation using EDR tools

Experience with SOAR platforms (e.g., Tines or Splunk SOAR)

Strong communication and leadership abilities to partner with diverse stakeholders

Background in software development or engineering operations for consumer products; BS in a tech field is helpful

Hands-on cloud experience (e.g., GCP, AWS, Heroku, Azure)

Clear communication

Leadership

Collaborative mindset

Security information and event management (SIEM)

Splunk, ELK, Google BigQuery

Endpoint detection and investigation (EDR) tools

📌 Senior AWS Security Engineer (Valladolid)
🏢 Mozilla
📍 Valladolid