security engineer in medicine

Moderna builds an mRNA technology platform and infrastructure for reimagining how medicines are created and delivered.

• Lead the enterprise code security strategy and manage the primary code security platform;
• Lead code security architecture for custom-built applications and services, including secure design reviews, architecture reviews, and software development lifecycle risk assessments;
• Lead risk assessments across on-premises and cloud environments, identify vulnerabilities, and recommend mitigation strategies for COTS products and custom in-house services;
• Conduct threat modeling for applications, APIs, platforms, and supporting infrastructure to identify abuse paths and control gaps;
• Drive secure software development practices, including code security, dependency risk management, secrets handling, and secure-by-design engineering patterns;
• Assess and advise on security risks across cloud, network, and AI-enabled architectures;
• Identify and remediate security misconfigurations across applications and cloud environments in collaboration with security operations and platform teams;
• Provide architectural guidance and technical leadership across multiple security domains.

• 4+ Years of cybersecurity experience with strong expertise in application and code security architecture;
• Experience reviewing custom-built applications and services for secure design, code-level weaknesses, and architectural flaws;
• Strong understanding of secure software development, threat modeling, dependency and package risk, secrets management, and common application security vulnerabilities;
• Ability to work with software engineers and architects and translate security concerns into practical design guidance;
• Broad security knowledge across cloud, network, and AI domains;
• Experience assessing cloud security architectures and identifying misconfigurations in modern hybrid environments;
• Working knowledge of network security fundamentals, including segmentation, core protocols, and common enterprise security controls;
• Familiarity with AI security risks and architectural considerations;
• Strong leadership and communication skills, including the ability to influence technical decisions and explain complex security risks to senior stakeholders;
• Exceptional analytical, critical thinking, and problem-solving skills with a strategic mindset.

• Competitive healthcare and voluntary benefit programs;
• Fitness, mindfulness, and mental health support;
• Family building benefits, including fertility, adoption, and surrogacy support;
• Generous paid time off, including vacation, bank holidays, volunteer days, sabbatical, global recharge days, and a discretionary year-end shutdown;
• Savings and investment benefits;
• Location-specific perks and extras;
• Benefits may vary depending on the nature of employment and the country of work;
• 70/30 Work model with 70% in-office collaboration;
• Smoke-free, alcohol-free, and drug-free work environment.