Senior API Security Engineer

RXinsider LTD.; Cambridge (MA); On-site; USD 150,000 - 230,000; Full time

Benefits offered by this job

Healthcare

Well-being resources

Family planning benefits

Generous paid time off

Job summary

Moderna is seeking a Cybersecurity Engineer to design, implement, and mature API security across enterprise applications, shared services, integrations, and AI-related platforms. This role focuses on securing APIs and the systems that expose and consume them, with emphasis on visibility, control, and risk reduction.

The ideal candidate brings hands-on API security experience, knowledge of authentication and authorization, threat modeling, and cloud security fundamentals, and will help shape

Qualifications

• 5+ years of experience in cybersecurity, application security, platform security, or related engineering discipline with API security focus.
• Strong understanding of API security risks and controls, including authentication, authorization, token handling, rate limiting, data exposure, input validation, and service-to-service trust models.
• Experience with REST, GraphQL, or other modern API patterns in cloud-native or distributed environments.
• Experience collaborating with engineering/platform teams to improve API design, security posture, and controls.
• Familiarity with API gateways, service meshes, reverse proxies, or related security control points.

Responsibilities

• Design, implement, and mature API security across applications, services, and AI platforms.
• Evaluate and operationalize API security technologies for discovery, posture, monitoring, and policy enforcement.
• Identify insecure API designs and weak auth patterns; drive remediation with stakeholders.
• Perform API threat modeling and risk assessments for microservices and AI-enabled workflows.
• Promote secure API engineering practices including authentication, authorization, rate limiting, and secrets handling.

Skills

API security

Threat modeling

Cloud security

Identity & access

Security architecture

API gateways

Job description

Moderna is seeking a Cybersecurity Engineer to design, implement, and mature API security across enterprise applications, shared services, integrations, and AI-related platforms. This role focuses on securing APIs and the systems that expose and consume them, with emphasis on visibility, control, and risk reduction.

The ideal candidate brings hands-on API security experience, knowledge of authentication and authorization, threat modeling, and cloud security fundamentals, and will help shape