Senior Code Security Architect — Enterprise & Cloud Risk

Moderna; Warszawa; On-site; PLN 420,000 - 620,000; Full time

Benefits offered by this job

Healthcare

Well-being programs

Family building benefits

Generous paid time off

Financial planning & retirement

Job summary

Moderna is expanding its security leadership in Warsaw to embed secure software practices across the development lifecycle. You will partner with engineering teams to shape secure design and drive architectures for cloud, on-prem, and AI-enabled systems.

The role requires deep expertise in application security, threat modelling, and risk assessment, with a track record of collaborating with senior stakeholders to reduce vulnerabilities while maintaining delivery speed.

Qualifications

• 7+ years of cybersecurity experience with strong depth in application and code security architecture.
• Experience reviewing custom-built apps for security risk, including secure design and architectural flaws.
• Strong knowledge of secure software development practices, threat modeling, dependency risk, secrets management, and vulnerabilities.

Responsibilities

• Lead enterprise code security strategy and manage the primary code security platform.
• Conduct secure design reviews, architecture reviews, and risk assessments across the SDLC.
• Assess security risks across on-prem and cloud environments; recommend pragmatic mitigations.

Skills

Cybersecurity leadership

Application security architecture

Threat modeling

Cloud security

AI security

Secure SDLC

Security reviews

Communication with stakeholders

Security risk assessment

Hybrid cloud/on-prem

Education

Bachelor's degree in a relevant field

Tools

Security frameworks & tools

Job description

Moderna is expanding its security leadership in Warsaw to embed secure software practices across the development lifecycle. You will partner with engineering teams to shape secure design and drive architectures for cloud, on-prem, and AI-enabled systems.

The role requires deep expertise in application security, threat modelling, and risk assessment, with a track record of collaborating with senior stakeholders to reduce vulnerabilities while maintaining delivery speed.