Senior Software Security Engineer

If you’re interested in this role, please apply in English and include an English version of your Resume/CV.

The Role:

Joining Moderna means advancing mRNA science to transform medicine. Work with exceptional global teams on a broad pipeline and build a career that makes a real difference for patients.

As a Senior Software Security Engineer, you will lead Moderna’s code security strategy and provide security architecture guidance across the broader hybrid environment, including cloud, network, and emerging AI use cases. You will independently assess how software is built, identify risk in custom code and development patterns, and establish practical security controls across source control, artifact management, and CI/CD workflows. Working with software engineers, architects, security operations, platform teams, peers, and senior stakeholders, you will connect control gaps across layers, guide complex risk-informed decisions, and advance secure-by-design and secure-by-default practices.

Here’s What You’ll Do:

Own and drive the enterprise code security strategy and roadmap, including technical ownership of the primary code security platform and prioritization of improvements based on risk and engineering needs.

Lead code security architecture efforts for custom-built applications and services, including secure design reviews, architecture reviews, and risk assessments across the software development lifecycle.

Lead risk assessments across on-prem and cloud environments, identifying vulnerabilities and recommending mitigation strategies for both COTS products and custom inhouse developed services.

Conduct threat modeling exercises for applications, APIs, platforms, and supporting infrastructure to proactively identify abuse paths and control gaps.

Drive security best practices for secure software development, including code security principles, dependency risk management, secrets handling, and secure-by-design engineering patterns.

Assess and advise on security risks across cloud, network, and AI-enabled architectures, ensuring code-level concerns are evaluated in the broader system context.

Identify and remediate security misconfigurations across applications and cloud environments, collaborating with security operations and platform teams to improve prevention, detection, and response.

Provide architectural guidance and technical leadership across multiple security domains, mentor peers, and independently guide complex security decisions, escalating material risks and trade-offs to the appropriate stakeholders.

Explore opportunities to use approved Generative AI tools to improve productivity, knowledge sharing, and role-relevant workflows while maintaining required quality, confidentiality, and compliance standards.

Here’s What You’ll Bring to the Table (Basic Qualifications):

6+ years of experience in cybersecurity or software engineering, with substantial experience in application and code security architecture and demonstrated ownership of complex security initiatives.

Demonstrated experience reviewing custom-built applications and services for security risk, including secure design, code-level weaknesses, and architectural flaws.

Strong understanding of secure software development practices, threat modeling, dependency and package risk, secrets management, and common application security vulnerabilities.

Ability to work effectively with software engineers and architects, translating security concerns into practical guidance that improves code and system design.

Broad security knowledge across cloud, network, and AI domains, with the ability to assess risk beyond the codebase and understand how controls interact across layers.

Experience assessing cloud security architectures and identifying misconfigurations in modern hybrid environments.

Working knowledge of network security fundamentals, including segmentation, core protocols, and common enterprise security controls.

Familiarity with AI security risks and architectural considerations, especially where AI-enabled services intersect with application and data security.

Strong leadership and communication skills, capable of influencing technical decisions and explaining complex security risks to senior stakeholders.

Exceptional analytical, critical thinking, and problem-solving skills with a strategic mindset.

Pay & Benefits

At Moderna, we believe that when you feel your best, you can do your best work.   That’s why our benefits and well-being resources are designed to support you, at work, at home, and everywhere in between.

Competitive healthcare, plus voluntary benefit programs to support your unique needs

A holistic approach to well-being with access to fitness, mindfulness, and mental health support

Family building benefits, including fertility, adoption, and surrogacy support

Generous paid time off, including vacation, bank holidays, volunteer days, sabbatical, global recharge days, and a discretionary year-end shutdown

Savings and investments to help you plan for the future

Location-specific perks and extras

The benefits offered may vary depending on the nature of your employment with Moderna and the country where you work.

About Moderna

Since our founding in 2010, we have aspired to build the leading mRNA technology platform, the infrastructure to reimagine how medicines are created and delivered, and a world-class team. We believe in giving our people a platform to change medicine and an opportunity to change the world.

By living our mission, values, and mindsets every day, our people are the driving force behind our scientific progress and our culture. Together, we are creating a culture of belonging and building an organization that cares deeply for our patients, our employees, the environment, and our communities.

We are proud to have been recognized as a Science Magazine Top Biopharma Employer, a Fast Company Best Workplace for Innovators, and a Great Place to Work in the U.S.

If you want to make a difference and join a team that is changing the future of medicine, we invite you to visit modernatx.com/careers to learn more about our current opportunities.

Moderna is a place where everyone can grow. If you meet the Basic Qualifications for the role and you would be excited to contribute to our mission every day, please apply!

Moderna is committed to equal opportunity in employment and non-discrimination for all employees and qualified applicants without regard to a person's race, color, sex, gender identity or expression, age, religion, national origin, ancestry or citizenship, ethnicity, disability, military or protected veteran status, genetic information, sexual orientation, marital or familial status, or any other personal characteristic protected under applicable law. We consider qualified applicants regardless of criminal histories, consistent with legal requirements.

We’re focused on attracting, retaining, developing, and advancing our employees. By cultivating a workplace that values diverse experiences, backgrounds, and ideas, we create an environment where every employee can contribute their best.

Moderna is committed to offering reasonable accommodation or adjustments to qualified job applicants with disabilities. Any applicant requiring an accommodation or adjustment in connection with the hiring process and/or to perform the essential functions of the position for which the applicant has applied should contact the Accommodations and Adjustments team at leavesandaccommodations@modernatx.com .

-