Senior Security Engineer (Security Architect)

<p><b><span>The Role: </span></b></p><p>Joining Moderna offers the unique opportunity to be part of a pioneering team that's revolutionizing medicine through mRNA technology with a diverse pipeline of development programs across various diseases.</p><p></p><p>As an employee, you'll be part of a continually growing organization, working alongside exceptional colleagues and strategic partners worldwide, contributing to global health initiatives.</p><p></p><p>Moderna's commitment to advancing the technological frontier of mRNA medicines ensures a challenging and rewarding career experience with the potential to make a significant impact on patients' lives worldwide​.</p><p></p><p>Moderna is solidifying its presence within our international business services hub in Warsaw, Poland, a city renowned for its rich scientific and technological heritage. This hub provides critical functions, meeting the growing demand of Moderna’s global business operations. We're inviting professionals from around the world to join our mission and contribute to the future of mRNA medicines​.</p><p></p><p>As a Senior Security Engineer (Security Architect), you will play a critical role in securing Moderna’s hybrid <span>infrastructure—spanning</span> both on-premise and cloud environments. You will lead risk assessments of complex cloud systems, optimize network security strategies, and provide expert guidance on network architecture. Your deep understanding of the TCP/IP stack and cloud security configurations will help drive a resilient and secure network and application ecosystem.</p><p></p><p>This role requires a strategic thinker and technical expert who can conduct full-scale risk assessments of custom-built applications, proactively identify and mitigate security misconfigurations, and work closely with security operations teams to enhance detection and response capabilities. You will collaborate across teams to threat model both the network and application stack, ensuring robust security postures for Moderna’s digital ecosystem.</p><p></p><p><b>Here’s What You’ll Do:</b></p><p><b>Your key responsibilities will be:</b></p><ul><li><p>Lead risk assessments across on-premise and cloud environments, identifying vulnerabilities and recommending mitigation strategies for both COTS products and custom in-house developed services.</p></li><li><p>Enhance Moderna’s network security posture, procedures, and strategy across the enterprise.</p></li><li><p>Conduct threat modeling exercises with partners in network security and application security, ensuring proactive defense measures.</p></li><li><p>Identify and remediate cloud security misconfigurations, collaborating with SOC analysts to enhance detection and response capabilities.</p></li><li><p>Drive security best practices in network design, segmentation, and zero-trust architecture.</p></li></ul><p></p><p><b>Your responsibilities will also include:</b></p><ul><li><p>Partner with cross-functional teams to integrate network security controls into cloud-native and hybrid infrastructures.</p></li><li><p>Track and report key performance metrics related to network security posture and incident response efficiency.</p></li><li><p>Stay ahead of emerging cybersecurity threats and proactively address potential risks within Moderna’s digital ecosystem.</p></li><li><p>Contribute to Moderna’s security operations strategy, ensuring best-in-class network security frameworks.</p></li></ul><p></p><p><b>The key Moderna Mindsets you’ll need to succeed in the role:</b></p><ul><li><p><b>We question convention</b> – You challenge traditional security methodologies and bring innovative thinking to secure a rapidly evolving digital landscape​.</p></li><li><p><b>We digitize everywhere possible</b> – You leverage automation and digital tooling to enhance security visibility and ensure scalable security solutions across Moderna’s hybrid infrastructure​.</p></li></ul><p></p><p><b>Here’s What You’ll Need:</b></p><ul><li><p>5+ years of experience in cybersecurity, with a focus on network security, application security, and risk assessment.</p></li><li><p>Expertise in hybrid network environments, including on-prem and cloud security architectures (AWS, Azure, or GCP).</p></li><li><p>Deep technical knowledge of the TCP/IP stack, network protocols, and security controls.</p></li><li><p>Proven ability to conduct network risk assessments and cloud security reviews.</p></li><li><p>Strong understanding of cloud security misconfigurations and code security principles.</p></li><li><p>Hands-on experience with firewalls, IDS/IPS, VPNs, and zero-trust architectures.</p></li><li><p>Experience working with a SOC to refine cloud security monitoring and detection capabilities.</p></li><li><p>Ability to develop and refine security playbooks, ensuring effective incident response for network-related threats.</p></li><li><p>Strong leadership skills, capable of providing technical mentorship and communicating complex security issues to