Top Tech Jobs & Startup Jobs

Maintain and mature Mozilla's ISMS and support ISO 27001 and SOC 2 Type 2 audits. Manage SoA, risk treatment plans, policy program, gap tracking and remediation, internal audit support, and cross-functional evidence collection. Advise leadership on audit risk and certification readiness.

Advance Firefox security architecture and cryptography stack, implement WebPKI and web platform security features, improve browser reliability and performance, debug multi-threaded native code, and collaborate on security design, planning, and cross-team initiatives.

Maintain and mature Mozilla's ISMS, support ISO 27001 and SOC 2 Type 2 audits, author compliance narratives, track remediation, lead policy program, scale compliance for products, and partner with cross-functional teams to drive control ownership and audit readiness.

Advance Firefox security architecture and cryptography stack by designing and implementing web platform security features. Improve browser reliability, performance, and memory efficiency. Investigate and resolve security issues, perform debugging and root-cause analysis in a multi-threaded, cross-platform browser codebase, and collaborate on standards-based implementations with internal teams and the broader web community.

Maintain and mature Mozilla's ISMS and support ISO 27001 and SOC 2 Type 2 audit programs. Author system descriptions and policies, manage risk treatment plans, track remediation, support internal audits, and partner with Engineering, Legal, Privacy, and Product to drive control ownership and audit readiness.

Own and scale Mozilla's web bug bounty program, triage and validate incoming reports, drive vulnerability remediation with engineering teams, perform targeted code reviews (JS/Python), collaborate with SIRT on incidents, and develop tooling to improve triage and program insights.

Advance Firefox security architecture and cryptography stack by designing and implementing web platform security features. Improve browser reliability, performance, and memory efficiency. Debug and resolve security-sensitive, multi-threaded issues, contribute to standards-based implementations, and collaborate across teams on security initiatives, technical design, and planning.

Own and scale Mozilla's web bug bounty program, triage and validate incoming vulnerability reports, drive remediation with engineering teams, perform targeted JavaScript and Python code reviews, collaborate with SIRT on incidents and post-incident reviews, and develop tooling to improve triage and program insights.

Build and maintain scalable release automation and CI/CD pipelines to run tens of thousands of build/test/release tasks daily. Improve developer experience, optimize cloud-based build resources, collaborate with distributed teams, perform code reviews, and respond to critical service outages during normal working hours.

Drive full‑stack and platform reliability work for the Firefox Add‑ons ecosystem: build features and automated moderation pipelines, improve observability, deployments and incident response, and maintain platform security and trust. Collaborate with engineers, reviewers, product, and community contributors to modernize DevHub, Reviewer tools, and moderation systems, and contribute openly via code reviews and pull requests.