About the Role
As a Security Engineer (Security Architect), you will play a critical role in shaping Moderna's code security strategy while helping secure our broader hybrid environment across cloud, network, and emerging AI use cases. This role is first and foremost for a strong code security architect — someone who can assess how software is built, identify risk in custom code and development patterns, and partner with engineering teams to design practical security controls in Source control, Artifact, and CI/CD workflows that improve the resilience of applications and platforms.
Responsibilities
•Lead code security enterprise strategy and manage and maintain the primary code security platform
•Lead code security architecture efforts for custom-built applications and services, including secure design reviews, architecture reviews, and risk assessments across the software development lifecycle
•Lead risk assessments across on-prem and cloud environments, identifying vulnerabilities and recommending mitigation strategies, for both COTS products and custom in-house developed services
•Conduct threat modeling exercises for applications, APIs, platforms, and supporting infrastructure to proactively identify abuse paths and control gaps
•Drive security best practices for secure software development, including code security principles, dependency risk management, secrets handling, and secure-by-design engineering patterns
•Assess and advise on security risks across cloud, network, and AI-enabled architectures, ensuring code-level concerns are evaluated in the broader system context
•Identify and remediate security misconfigurations across applications and cloud environments, collaborating with security operations and platform teams to improve prevention, detection, and response
•Provide architectural guidance and technical leadership across multiple security domains, helping teams make better risk-informed decisions without slowing delivery
Requirements
•4+ years of experience in cybersecurity, with strong depth in application and code security architecture
•Demonstrated experience reviewing custom-built applications and services for security risk, including secure design, code-level weaknesses, and architectural flaws
•Strong understanding of secure software development practices, threat modeling, dependency and package risk, secrets management, and common application security vulnerabilities
•Ability to work effectively with software engineers and architects, translating security concerns into practical guidance that improves code and system design
•Broad security knowledge across cloud, network, and AI domains, with the ability to assess risk beyond the codebase and understand how controls interact across layers
•Experience assessing cloud security architectures and identifying misconfigurations in modern hybrid environments
•Working knowledge of network security fundamentals, including segmentation, core protocols, and common enterprise security controls
•Familiarity with AI security risks and architectural considerations, especially where AI-enabled services intersect with application and data security
•Strong leadership and communication skills, capable of influencing technical decisions and explaining complex security risks to senior stakeholders
•Exceptional analytical, critical thinking, and problem-solving skills with a strategic mindset
Conditions
•Moderna champions the significant benefits of in-office collaboration by embracing a 70/30 work model
•Moderna is a smoke-free, alcohol-free, and drug-free work environment
•Competitive healthcare, plus voluntary benefit programs to support your unique needs
•A holistic approach to well-being with access to fitness, mindfulness, and mental health support
•Family building benefits, including fertility, adoption, and surrogacy support
•Generous paid time off, including vacation, bank holidays, volunteer days, sabbatical, global recharge days, and a discretionary year-end shutdown
•Savings and investments to help you plan for the future
•Location-specific perks and extras
