Sr. AI Security Engineer

Moderna; Warszawa; On-site; PLN 420,000 - 620,000; Full time

Benefits offered by this job

Healthcare

Well-being programs

Family building benefits

Generous paid time off

Financial planning & retirement

Job summary

Moderna is expanding its security leadership in Warsaw to embed secure software practices across the development lifecycle. You will partner with engineering teams to shape secure design and drive architectures for cloud, on-prem, and AI-enabled systems.

The role requires deep expertise in application security, threat modelling, and risk assessment, with a track record of collaborating with senior stakeholders to reduce vulnerabilities while maintaining delivery speed.

Qualifications

• 7+ years of cybersecurity experience with strong depth in application and code security architecture.
• Experience reviewing custom-built apps for security risk, including secure design and architectural flaws.
• Strong knowledge of secure software development practices, threat modeling, dependency risk, secrets management, and vulnerabilities.

Responsibilities

• Lead enterprise code security strategy and manage the primary code security platform.
• Conduct secure design reviews, architecture reviews, and risk assessments across the SDLC.
• Assess security risks across on-prem and cloud environments; recommend pragmatic mitigations.

Skills

Cybersecurity leadership

Application security architecture

Threat modeling

Cloud security

AI security

Secure SDLC

Security reviews

Communication with stakeholders

Security risk assessment

Hybrid cloud/on-prem

Education

Bachelor's degree in a relevant field

Tools

Security frameworks & tools

Job description

The Role

Joining Moderna means advancing mRNA science to transform medicine. Work with exceptional global teams on a broad pipeline and build a career that makes a real difference for patients. Moderna is strengthening its international business services hub in Warsaw, supporting our growing global operations. This is an opportunity to shape the future of code security across Moderna's regional technology landscape, influencing how secure software is designed, built, and deployed at enterprise scale. As a senior individual contributor, you will combine deep application security expertise with broad architectural knowledge spanning cloud, network, and AI‑enabled environments, partnering with engineering teams to embed security into every stage of the software development lifecycle.

Here’s What You’ll Do

• Lead Moderna's enterprise code security strategy while managing and maintaining the primary code security platform.
• Lead code security architecture for custom‑built applications and services, conducting secure design reviews, architecture reviews, and security risk assessments throughout the software development lifecycle.
• Assess security risks across on‑premises and cloud environments, identifying vulnerabilities and recommending pragmatic mitigation strategies for both commercial off‑the‑shelf (COTS) products and internally developed applications and services.
• Conduct threat modelling exercises across applications, APIs, platforms, and supporting infrastructure to proactively identify abuse paths, architectural weaknesses, and security control gaps.
• Establish and champion secure software development best practices, including secure coding principles, dependency and package risk management, secrets management, and secure‑by‑design engineering patterns.
• Assess and advise on security risks across cloud, network, and AI‑enabled architectures, ensuring application and code‑level security considerations are evaluated within the broader technology ecosystem.
• Identify and help remediate security misconfigurations across applications and cloud environments, partnering closely with Security Operations and platform engineering teams to strengthen prevention, detection, and response capabilities.
• Provide architectural guidance and technical leadership across multiple security domains, enabling engineering teams to make informed risk‑based decisions without slowing software delivery.
• Partner with software engineers, architects, and technical stakeholders to translate complex security risks into practical, actionable guidance that improves application resilience and system design.
• Evaluate modern development practices across source control, artifact management, and CI/CD workflows, ensuring security is embedded throughout the development lifecycle.

Key Moderna Mindsets

We behave like owners. The solutions we’re building go beyond any job description.

We digitize everywhere possible using the power of code to maximize our impact on patients.

Here’s What You’ll Bring To The Table

• 7+ years of experience in cybersecurity, with strong depth in application and code security architecture.
• Demonstrated experience reviewing custom‑built applications and services for security risk, including secure design, code‑level weaknesses, and architectural flaws.
• Strong understanding of secure software development practices, threat modeling, dependency and package risk, secrets management, and common application security vulnerabilities.
• Ability to work effectively with software engineers and architects, translating security concerns into practical guidance that improves code and system design.
• Broad security knowledge across cloud, network, and AI domains, with the ability to assess risk beyond the codebase and understand how controls interact across layers.
• Experience assessing cloud security architectures and identifying misconfigurations in modern hybrid environments.
• Working knowledge of network security fundamentals, including segmentation, core protocols, and common enterprise security controls.
• Familiarity with AI security risks and architectural considerations, especially where AI‑enabled services intersect with application and data security.
• Strong leadership and communication skills, capable of influencing technical decisions and explaining complex security risks to senior stakeholders.
• Exceptional analytical, critical thinking, and problem‑solving skills with a strategic mindset.

Pay & Benefits

• Competitive healthcare, plus voluntary benefit programs to support your unique needs.
• A holistic approach to well‑being with access to fitness, mindfulness, and mental health support.
• Family building benefits, including fertility, adoption, and surrogacy support.
• Generous paid time off, including vacation, bank holidays, volunteer days, sabbatical, global recharge days, and a discretionary year‑end shutdown.
• Savings and investments to help you plan for the future.
• Location‑specific perks and extras.

About Moderna

Since our founding in 2010, Moderna has aspired to build the leading mRNA technology platform and a world‑class team. We believe in giving our people a platform to change medicine and an opportunity to change the world.

Moderna is a smoke‑free, alcohol‑free, and drug‑free work environment.

Moderna is committed to equal opportunity in employment and non‑discrimination for all employees and qualified applicants without regard to a person's race, color, sex, gender identity or expression, age, religion, national origin, ancestry or citizenship, ethnicity, disability, military or protected veteran status, genetic information, sexual orientation, marital or familial status, or any other personal characteristic protected under applicable law. We consider qualified applicants regardless of criminal histories, consistent with legal requirements.

Moderna is committed to offering reasonable accommodation or adjustments to qualified job applicants with disabilities. Any applicant requiring an accommodation or adjustment in connection with the hiring process and/or to perform the essential functions of the position for which the applicant has applied should contact the Accommodations and Adjustments team at [e-mail].