Software Security Engineer

Moderna; Warszawa; On-site; PLN 180,000 - 290,000; Full time

Benefits offered by this job

Healthcare benefits

Well-being programs

Family building benefits

Generous paid time off

Savings & investments

Location-specific perks

Job summary

Moderna Warsaw is expanding its enterprise security team to govern the adoption of generative AI and agentic solutions. The role leads security standards, architectural guidance, and risk reviews across AI and traditional tech, partnering with engineering, platform, and cybersecurity teams.

As a senior contributor, you will define target-state security architecture, governance guardrails, and scalable patterns to enable secure AI deployment while reducing enterprise risk.

Qualifications

• 5+ years in cybersecurity with focus on network and application security.
• Experience defining security strategy and architecture for enterprise initiatives.
• Ability to translate AI risk into governance, controls and adoption decisions.
• Experience conducting security assessments across AI and traditional domains.
• Strong written and verbal communication to engineers and senior leaders.

Responsibilities

• Define Moderna's enterprise AI security strategy and target-state architecture.
• Develop standards and guidance for AI systems, data access, and identity boundaries.
• Lead security assessments for AI apps, model-integrated services, and agentic workflows.
• Perform baseline security reviews across code, cloud, networking, APIs, and identity.
• Identify gaps and propose practical remediation across AI and traditional tech.
• Provide leadership that balances secure-by-design with innovation and risk.
• Deliver executive-ready recommendations on AI security risks and governance.
• Collaborate with engineering, platform, and cybersecurity teams to embed security.

Skills

Cybersecurity leadership

Network security

Application security

Risk assessment

Security strategy

Job description

If you’re interested in this role, please apply in English and include an English version of your Resume/CV.

The Role

Joining Moderna means advancing mRNA science to transform medicine. Work with exceptional global teams on a broad pipeline and build a career that makes a real difference for patients. Moderna is strengthening its international business services hub in Warsaw, supporting our growing global operations. This is an opportunity to define how AI is adopted securely across Moderna by shaping the enterprise security strategy for emerging AI technologies. As a senior individual contributor, you will establish the architectural principles, governance guardrails, and security standards that enable safe, scalable AI adoption while partnering with engineering, digital, platform, and security teams across the organization. Alongside deep expertise in AI security, you will apply broad cybersecurity knowledge across cloud, applications, identity, networking, and APIs to help reduce enterprise risk and support the responsible adoption of Generative AI and agentic solutions.

Here’s What You’ll Do

• Define and drive Moderna's enterprise AI security strategy, establishing target-state architecture, security principles, governance guardrails, and scalable security patterns that enable secure AI adoption.
• Develop practical security standards and architectural guidance for AI systems, including model usage, agentic workflows, integration patterns, data access, identity boundaries, and operational security controls.
• Lead security assessments and risk reviews for AI applications, AI-enabled products, model-integrated services, and agentic solutions, identifying material risks related to data exposure, excessive privilege, insecure integrations, unsafe outputs, prompt abuse, and runtime behavior.
• Execute baseline security reviews across traditional technology domains, including application code, cloud infrastructure, networking, APIs, identity, and application architecture.
• Identify systemic security control gaps and recommend pragmatic remediation strategies that improve security outcomes across both AI and traditional enterprise technology environments.
• Provide architectural guidance and technical leadership that supports secure-by-design engineering decisions while balancing innovation, operational effectiveness, and enterprise risk.
• Deliver executive-ready recommendations on AI security risks, architectural trade-offs, governance priorities, and enterprise security strategy.
• Partner closely with engineering, platform, digital, and cybersecurity teams to embed security throughout AI initiatives and broader technology programs.
• Influence enterprise roadmaps and security practices that support the safe, responsible, and scalable adoption of Generative AI capabilities across the organization.

Key Mindsets

We question convention because proven models don’t always fuel the future.

We behave like owners. The solutions we’re building go beyond any job description.

Here’s What You’ll Bring To The Table

• 5+ years of experience in cybersecurity, with a focus on network security, application security, and risk assessment.
• Expertise in hybrid network environments, including on-prem and cloud security architectures (AWS, Azure, or GCP).
• Experience defining security strategy and architecture for enterprise technology initiatives, with the ability to build practical standards, patterns, and guardrails that scale.
• Demonstrated expertise in AI security, including security assessment of AI applications, model-integrated services, agentic workflows, data handling patterns, and attack paths unique to AI-enabled systems.
• Strong ability to translate emerging AI risk into enterprise security strategy, architectural guidance, governance controls, and risk-based adoption decisions.
• Sufficient technical breadth to execute solid baseline security reviews across traditional domains including code, cloud, networking, APIs, identity, and application architecture.
• Ability to identify insecure design decisions, translate technical findings into prioritized recommendations, and influence remediation across multiple teams.
• Excellent written and verbal communication skills, including the ability to explain complex architectural and risk issues to engineers, architects, and senior leaders.
• Demonstrated leadership, strong judgment, and comfort operating in ambiguous environments with rapidly evolving technology and risk.
• Experience in large-scale or regulated environments is strongly preferred.

Pay & Benefits

• Competitive healthcare, plus voluntary benefit programs to support your unique needs.
• A holistic approach to well-being with access to fitness, mindfulness, and mental health support.
• Family building benefits, including fertility, adoption, and surrogacy support.
• Generous paid time off, including vacation, bank holidays, volunteer days, sabbatical, global recharge days, and a discretionary year-end shutdown.
• Savings and investments to help you plan for the future.
• Location-specific perks and extras.

Moderna is a place where everyone can grow. If you meet the Basic Qualifications for the role and you would be excited to contribute to our mission every day, please apply!

Moderna is committed to equal opportunity in employment and non-discrimination for all employees and qualified applicants without regard to a person's race, color, sex, gender identity or expression, age, religion, national origin, ancestry or citizenship, ethnicity, disability, military or protected veteran status, genetic information, sexual orientation, marital or familial status, or any other personal characteristic protected under applicable law. We consider qualified applicants regardless of criminal histories, consistent with legal requirements.

Moderna is committed to offering reasonable accommodation or adjustments to qualified job applicants with disabilities. Any applicant requiring an accommodation or adjustment in connection with the hiring process and/or to perform the essential functions of the position for which the applicant has applied should contact the Accommodations and Adjustments team at [e-mail].