Jobs at Mozilla

Design, implement, and maintain Firefox security architecture and cryptography stack. Develop standards-based web platform security features, diagnose and fix stability/performance issues in a multi-threaded browser, and collaborate across teams on security design, debugging, and long-term solutions.

Lead full‑stack development and reliability improvements for the Firefox Add‑ons ecosystem, building features, automated moderation pipelines, reviewer tools, and observability. Improve platform reliability, respond to incidents, and help keep the ecosystem safe and trustworthy. Collaborate across design, product, QA, and community contributors and contribute openly through PRs and code reviews.

Own and scale Mozilla's web bug bounty program; triage and validate reports; drive end-to-end vulnerability remediation; perform targeted code reviews (JavaScript, Python); collaborate with SIRT on incidents; build tooling and KPIs to improve triage and program insight; engage external researchers and platforms.

Lead and mature Mozilla's ISMS and compliance programs (ISO 27001 and SOC 2 Type 2). Manage SoA, risk treatment, audits, policy lifecycle, gap remediation, internal audits, and cross-functional control ownership while advising security leadership on certification readiness and compliance strategy.

Lead and mature Mozilla's ISMS and compliance programs (ISO 27001, SOC 2), support audit execution and evidence collection, manage policy lifecycle, track remediation and internal audits, and partner with cross-functional teams to translate compliance requirements into practical controls and processes.

Design, implement, and maintain Firefox security architecture and cryptography stack (WebPKI, cryptographic protocols). Build web platform security features, debug multi-threaded cross-platform native code, improve performance and memory usage, collaborate across teams, and contribute to technical design and standards-based implementations.

Advance Firefox security architecture and cryptography stack, design and implement web platform security features, improve browser reliability and performance, investigate and resolve stability and memory issues, collaborate across teams on security initiatives, and contribute to technical design, standards-based implementations, and long-term security solutions.

Design, implement, and maintain Firefox security architecture and cryptography stack. Build standards-based web platform security features, debug multi-threaded cross-platform native code, improve performance and memory efficiency, collaborate on security initiatives, and contribute to technical design and planning for browser security.

Join Mozilla Release Engineering to build and maintain scalable CI/CD pipelines that run tens of thousands of build/test/release tasks daily. Improve developer experience, optimize deployment pipelines, collaborate with distributed engineers, participate in code reviews, and respond to critical service outages during normal working hours. Work across Windows, macOS, and Linux and leverage cloud resources.

Design, implement, and maintain Firefox security and cryptography systems (WebPKI, cryptographic protocols, security-sensitive web APIs). Ship standards-based web platform features, diagnose and fix stability/performance/memory issues in a multi-threaded browser, and collaborate across teams on security design, debugging, and long-term solutions.

Own and scale Mozillas web bug bounty program, triage and validate incoming vulnerability reports, drive remediation with engineering teams, perform targeted JavaScript and Python code reviews, collaborate with SIRT on incidents, and develop tooling to improve program efficiency and insights.

Maintain and mature Mozilla's ISMS and support ISO 27001 and SOC 2 Type 2 audits, including scope, evidence preparation, auditor interviews, and remediation tracking. Lead policy creation and review cycles, support internal audits, scale compliance for new products/business units, and partner with engineering, legal, privacy, and product teams to drive control ownership and translate compliance into practical workflows.

Maintain and mature Mozilla's ISMS and support ISO 27001 and SOC 2 Type 2 audits. Manage SoA, risk treatment plans, policy program, gap tracking and remediation, internal audit support, and cross-functional evidence collection. Advise leadership on audit risk and certification readiness.

Advance Firefox security architecture and cryptography stack, implement WebPKI and web platform security features, improve browser reliability and performance, debug multi-threaded native code, and collaborate on security design, planning, and cross-team initiatives.

Maintain and mature Mozilla's ISMS, support ISO 27001 and SOC 2 Type 2 audits, author compliance narratives, track remediation, lead policy program, scale compliance for products, and partner with cross-functional teams to drive control ownership and audit readiness.

Advance Firefox security architecture and cryptography stack by designing and implementing web platform security features. Improve browser reliability, performance, and memory efficiency. Investigate and resolve security issues, perform debugging and root-cause analysis in a multi-threaded, cross-platform browser codebase, and collaborate on standards-based implementations with internal teams and the broader web community.

Maintain and mature Mozilla's ISMS and support ISO 27001 and SOC 2 Type 2 audit programs. Author system descriptions and policies, manage risk treatment plans, track remediation, support internal audits, and partner with Engineering, Legal, Privacy, and Product to drive control ownership and audit readiness.

Own and scale Mozilla's web bug bounty program, triage and validate incoming reports, drive vulnerability remediation with engineering teams, perform targeted code reviews (JS/Python), collaborate with SIRT on incidents, and develop tooling to improve triage and program insights.

Advance Firefox security architecture and cryptography stack by designing and implementing web platform security features. Improve browser reliability, performance, and memory efficiency. Debug and resolve security-sensitive, multi-threaded issues, contribute to standards-based implementations, and collaborate across teams on security initiatives, technical design, and planning.

Own and scale Mozilla's web bug bounty program, triage and validate incoming vulnerability reports, drive remediation with engineering teams, perform targeted JavaScript and Python code reviews, collaborate with SIRT on incidents and post-incident reviews, and develop tooling to improve triage and program insights.