API Security Engineer — Build Trusted, AI‑Ready APIs

BioSpace; Cambridge (MA); On-site; USD 122,000 - 195,000; Full time

Benefits offered by this job

Competitive healthcare

Well-being resources

Family planning benefits

Generous paid time off

Savings and investments

Location-specific perks

Job summary

Moderna is seeking a Cybersecurity Engineer to design, implement, and mature our API security posture across enterprise applications, shared services, and AI-enabled workflows. You will work with engineering, architecture, and security teams to strengthen authentication, authorization, and secure service-to-service communication.

You will analyze API telemetry, identify abuse paths, and drive remediation while shaping identity models for non-human and machine-to-machine access.

Qualifications

• 5+ years of experience in cybersecurity, application security, platform security, or related engineering with hands-on API security experience.
• Strong understanding of API security risks and controls including authentication, authorization, token handling, rate limiting, data exposure, input validation, and service-to-service trust models.
• Experience with REST, GraphQL, or other modern API patterns in cloud-native or distributed environments.
• Experience collaborating with engineering and platform teams to improve API security posture and operational controls.
• Familiarity with API gateways, service meshes, reverse proxies, or related control points used to secure and observe API traffic.
• Ability to perform threat modeling and risk assessments for APIs, integrations, and machine-to-machine patterns.
• Knowledge of identity concepts for non-human/workload identities and agentic access patterns is preferred.
• Familiarity with cloud and application security fundamentals including secrets management, logging, and secure design patterns.
• Experience with AI-enabled architectures or gateway patterns is a plus.

Responsibilities

• Design, implement, and mature Moderna’s API security across enterprise apps, shared services, and AI platforms.
• Evaluate and operationalize API security technologies for discovery, posture, traffic monitoring, anomaly detection, and policy enforcement.
• Identify insecure API designs and patterns, and drive remediation with stakeholders.
• Perform threat modeling and security assessments for APIs and backend services.
• Define secure API engineering practices including strong auth, rate limiting, and secure service-to-service communication.
• Collaborate with security and engineering teams to connect API findings with cloud, identity, and detection workflows.
• Provide pragmatic guidance to improve API security amid AI-enabled systems.

Skills

API security

Threat modeling

Cloud security

Identity & access

API pattern knowledge

Tools

API gateways

Service meshes

Reverse proxies

Job description

Moderna is seeking a Cybersecurity Engineer to design, implement, and mature our API security posture across enterprise applications, shared services, and AI-enabled workflows. You will work with engineering, architecture, and security teams to strengthen authentication, authorization, and secure service-to-service communication.

You will analyze API telemetry, identify abuse paths, and drive remediation while shaping identity models for non-human and machine-to-machine access.