API Security Engineer — Identity & AI Trust Guardrails

Moderna Therapeutics; United States; Hybrid; USD 146,000 - 234,000; Full time

Benefits offered by this job

Competitive healthcare

Well-being programs

Family planning benefits

Generous paid time off

Equity incentives

Job summary

Moderna Therapeutics is seeking a Cybersecurity Engineer focused on API security to design, implement, and mature security practices across APIs, services, and AI-enabled platforms. You will partner with engineering teams to strengthen authentication, authorization, and data protection while advancing threat modeling and secure API patterns.

The role emphasizes securing non-human identities, service-to-service communication, and scalable governance, with a hybrid work model in the United States.

Qualifications

• 5+ years of experience in cybersecurity, application security, platform security, or a related engineering discipline, with meaningful hands-on experience in API security.
• Strong understanding of API security risks and controls, including authentication, authorization, token handling, rate limiting, data exposure, input validation, and service-to-service trust models.

Responsibilities

• Design, implement, and mature Moderna’s API security across enterprise apps, services, integrations, and AI platforms.
• Evaluate, deploy, and operationalize API security tech for discovery, posture, traffic monitoring, anomaly detection, and policy enforcement.
• Collaborate with engineering teams to identify insecure API designs, weak authentication/authorization patterns, and data exposure risks.
• Perform API threat modeling and security assessments for microservices, integrations, and AI-enabled workflows.
• Promote secure API engineering practices: strong authentication, authorization, rate limiting, schema validation, secrets handling, and secure service-to-service communication.
• Shape security approaches for non-human and agentic identities, including service authentication and machine-to-machine access.
• Analyze API telemetry to identify abuse paths, misconfigurations, shadow APIs, and drive remediation.
• Coordinate with cloud, identity, and detection engineering teams to close API security gaps.
• Provide pragmatic remediation guidance to improve API security amid automation and AI-enabled systems.

Skills

API security

Threat modeling

Cloud security

Identity concepts

Security engineering

API design

Tools

API gateways

Service meshes

REST/GraphQL

Job description

Moderna Therapeutics is seeking a Cybersecurity Engineer focused on API security to design, implement, and mature security practices across APIs, services, and AI-enabled platforms. You will partner with engineering teams to strengthen authentication, authorization, and data protection while advancing threat modeling and secure API patterns.

The role emphasizes securing non-human identities, service-to-service communication, and scalable governance, with a hybrid work model in the United States.