Software Security Engineer

Moderna Therapeutics; Warszawa; On-site; PLN 260,000 - 420,000; Full time

Benefits offered by this job

Competitive healthcare

Well-being resources

Family building benefits

Job summary

Moderna seeks a Security Engineer (Security Architect) to shape code security strategy across cloud, network, and AI use cases. You will assess how software is built, identify risk in custom code, and guide engineering teams to implement secure-by-design controls in CI/CD workflows.

You will lead threat modeling, secure design reviews, and risk assessments across on-prem and cloud environments, guiding peers toward pragmatic architectural decisions while balancing security with delivery

Qualifications

• Strong understanding of secure software development practices, threat modeling, dependency and package risk, secrets management, and common application security vulnerabilities.
• Ability to work with software engineers and architects, translating security concerns into practical guidance.
• Experience leading secure design reviews, architecture reviews, and risk assessments across the software development lifecycle.

Responsibilities

• Lead code security enterprise strategy and manage the primary code security platform.
• Lead code security architecture efforts for custom-built applications and services, including secure design reviews and risk assessments.
• Lead risk assessments across on-prem and cloud environments, identifying vulnerabilities and mitigation strategies for both COTS and custom services.
• Conduct threat modeling exercises for applications, APIs, platforms, and supporting infrastructure to identify abuse paths and control gaps.
• Drive security best practices for secure software development, including dependency risk management and secrets handling.
• Assess and advise on security risks across cloud, network, and AI-enabled architectures, ensuring code-level concerns are evaluated in the broader system context.
• Identify and remediate security misconfigurations across applications and cloud environments, collaborating with security operations and platform teams.

Skills

Security architecture

Code security

Threat modeling

Cloud security

AI security

Communication

Leadership

Job description

As a Security Engineer (Security Architect), you will play a critical role in shaping Moderna's code security strategy while helping secure our broader hybrid environment across cloud, network, and emerging AI use cases. You will be a strong code security architect, assessing how software is built, identifying risk in custom code and development patterns, and partnering with engineering teams to design practical security controls in Source control, Artifact, and CI/CD workflows that improve the resilience of applications and platforms. You will be a strategic thinker and technical expert who can lead secure design and review discussions, threat model modern, complex, applications and services, and guide peers toward secure-by-design and secure-by-default practices. In addition to deep application and code security experience, the right candidate will be comfortable operating as a generalist security architect and be able to execute risk assessments across cloud, network, and AI security domains. The ideal candidate will bring enough breadth to assess end-to-end risk, connect control gaps across layers, and provide pragmatic architectural guidance.

Here’s What You’ll Do

• Lead code security enterprise strategy and manage and maintain the primary code security platform.
• Lead code security architecture efforts for custom-built applications and services, including secure design reviews, architecture reviews, and risk assessments across the software development lifecycle.
• Lead risk assessments across on-prem and cloud environments, identifying vulnerabilities and recommending mitigation strategies. This includes both COTS products and custom in-house developed services.
• Conduct threat modeling exercises for applications, APIs, platforms, and supporting infrastructure to proactively identify abuse paths and control gaps.
• Drive security best practices for secure software development, including code security principles, dependency risk management, secrets handling, and secure-by-design engineering patterns.
• Assess and advise on security risks across cloud, network, and AI-enabled architectures, ensuring code-level concerns are evaluated in the broader system context.
• Identify and remediate security misconfigurations across applications and cloud environments, collaborating with security operations and platform teams to improve prevention, detection, and response.
• Provide architectural guidance and technical leadership across multiple security domains, helping teams make better risk-informed decisions without slowing delivery.

Here’s What You’ll Bring to the Table

• 4+ years of experience in cybersecurity, with strong depth in application and code security architecture.
• Demonstrated experience reviewing custom-built applications and services for security risk, including secure design, code-level weaknesses, and architectural flaws.
• Strong understanding of secure software development practices, threat modeling, dependency and package risk, secrets management, and common application security vulnerabilities.
• Ability to work effectively with software engineers and architects, translating security concerns into practical guidance that improves code and system design.
• Broad security knowledge across cloud, network, and AI domains, with the ability to assess risk beyond the codebase and understand how controls interact across layers.
• Experience assessing cloud security architectures and identifying misconfigurations in modern hybrid environments.
• Working knowledge of network security fundamentals, including segmentation, core protocols, and common enterprise security controls.
• Familiarity with AI security risks and architectural considerations, especially where AI-enabled services intersect with application and data security.
• Strong leadership and communication skills, capable of influencing technical decisions and explaining complex security risks to senior stakeholders.
• Exceptional analytical, critical thinking, and problem-solving skills with a strategic mindset.

Pay & Benefits

At Moderna, we believe that when you feel your best, you can do your best work. That’s why our benefits and well-being resources are designed to support you—at work, at home, and everywhere in between.

• Competitive healthcare, plus voluntary benefit programs to support your unique needs
• A holistic approach to well-being with access to fitness, mindfulness, and mental health support
• Family building benefits, including fertility, adoption, and surrogacy support
• Generous paid time off, including vacation, bank holidays, volunteer days, sabbatical, global recharge days, and a discretionary year-end shutdown
• Savings and investments to help you plan for the future
• Location-specific perks and extras

The benefits offered may vary depending on the nature of your employment with Moderna and the country where you work.

About Moderna

Since our founding in 2010, we have aspired to build the leading mRNA technology platform, the infrastructure to reimagine how medicines are created and delivered, and a world-class team. We believe in giving our people a platform to change medicine and an opportunity to change the world. By living our mission, values, and mindsets every day, our people are the driving force behind our scientific progress and our culture. Together, we are creating a culture of belonging and building an organization that cares deeply for our patients, our employees, the environment, and our communities. We are proud to have been recognized as a Science Magazine Top Biopharma Employer, a Fast Company Best Workplace for Innovators, and a Great Place to Work in the U.S. As we build our company, we have always believed an in-person culture is critical to our success. Moderna champions the significant benefits of in-office collaboration by embracing a 70/30 work model. This 70% in-office structure helps to foster a culture rich in innovation, teamwork, and direct mentorship. Join us in shaping a world where every interaction is an opportunity to learn, contribute, and make a meaningful impact.

Our Mission and Vision

Our Mission: To deliver on the promise of transformative messenger RNA (mRNA) science to bring new medicines to patients.

Our Vision: To unlock the potential of mRNA by establishing an ecosystem of teams and partners that will work together to develop the broadest possible array of drugs, across diverse therapeutic areas and routes of administration, for serious diseases that are not treatable today.

Third Party Staffing Agencies

Moderna does not accept unsolicited resumes from any source other than directly from candidates. For the protection of all parties involved in the recruiting process, resumes will only be accepted from recruiters/agencies if a signed agreement is in place at the inception of the recruiting effort and authorized for a specified position. Unsolicited resumes sent to Moderna from recruiters/agencies do not constitute any relationship between the recruiter/agency and Moderna and do not obligate Moderna to pay fees if we hire from those resumes.

Reasonable Accommodation Notice

Moderna will make reasonable accommodations for qualified individuals with known disabilities, in accordance with applicable law. Applicants with disabilities may be entitled to reasonable accommodation under the terms of the Americans with Disabilities Act and certain state or local laws. Please inform the company's personnel representative by calling 617-460-9346 or emailing [e-mail] if you need assistance completing any forms or to otherwise participate in the application process. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.

Moderna is a smoke-free, alcohol-free, and drug-free work environment. Moderna is a place where everyone can grow.

Moderna is committed to equal opportunity in employment and non-discrimination for all employees and qualified applicants without regard to a person's race, color, sex, gender identity or expression, age, religion, national origin, ancestry or citizenship, ethnicity, disability, military or protected veteran status, genetic information, sexual orientation, marital or familial status, or any other personal characteristic protected under applicable law. We consider qualified applicants regardless of criminal histories, consistent with legal requirements. We’re focused on attracting, retaining, developing, and advancing our employees. By cultivating a workplace that values diverse experiences, backgrounds, and ideas, we create an environment where every employee can contribute their best.

Moderna is committed to offering reasonable accommodation or adjustments to qualified job applicants with disabilities. Any applicant requiring an accommodation or adjustment in connection with the hiring process and/or to perform the essential functions of the position for which the applicant has applied should contact the Accommodations and Adjustments team at [e-mail].