Senior Security Architect

If you’re interested in this role, please apply in English and include an English version of your Resume/CV.

 

The Role:

Joining Moderna means advancing mRNA science to transform medicine. Work with exceptional global teams on a broad pipeline and build a career that makes a real difference for patients. Moderna is strengthening its international business services hub in Warsaw, supporting our growing global operations. We welcome professionals ready to help advance our mission and shape the future of mRNA medicines.

This is an opportunity to shape the future of code security across Moderna's regional technology landscape, influencing how secure software is designed, built, and deployed at enterprise scale. As a senior individual contributor, you will combine deep application security expertise with broad architectural knowledge spanning cloud, network, and AI-enabled environments, partnering with engineering teams to embed security into every stage of the software development lifecycle. Working across modern development platforms, source control, artifacts, and CI/CD pipelines, you will help drive secure-by-design engineering while enabling innovation, including the responsible adoption of Generative AI and AI-enabled technologies.

Here’s What You’ll Do

• Lead Moderna's enterprise code security strategy while managing and maintaining the primary code security platform.

• Lead code security architecture for custom-built applications and services, conducting secure design reviews, architecture reviews, and security risk assessments throughout the software development lifecycle.

• Assess security risks across both on-premises and cloud environments, identifying vulnerabilities and recommending pragmatic mitigation strategies for both commercial off-the-shelf (COTS) products and internally developed applications and services.

• Conduct threat modelling exercises across applications, APIs, platforms, and supporting infrastructure to proactively identify abuse paths, architectural weaknesses, and security control gaps.

• Establish and champion secure software development best practices, including secure coding principles, dependency and package risk management, secrets management, and secure-by-design engineering patterns.

• Assess and advise on security risks across cloud, network, and AI-enabled architectures, ensuring application and code-level security considerations are evaluated within the broader technology ecosystem.

• Identify and help remediate security misconfigurations across applications and cloud environments, partnering closely with Security Operations and platform engineering teams to strengthen prevention, detection, and response capabilities.

• Provide architectural guidance and technical leadership across multiple security domains, enabling engineering teams to make informed risk-based decisions without slowing software delivery.

• Partner with software engineers, architects, and technical stakeholders to translate complex security risks into practical, actionable guidance that improves application resilience and system design.

• Evaluate modern development practices across source control, artifact management, and CI/CD workflows, ensuring security is embedded throughout the development lifecycle.

The key Moderna Mindsets you'll need to succeed in the role:

We behave like owners. The solutions we’re building go beyond any job description.

We digitize everywhere possible using the power of code to maximize our impact on patients.

Here’s What You’ll Bring to the Table

• 7+ years of experience in cybersecurity, with strong depth in application and code security architecture. 

• Demonstrated experience reviewing custom-built applications and services for security risk, including secure design, code-level weaknesses, and architectural flaws. 

• Strong understanding of secure software development practices, threat modeling, dependency and package risk, secrets management, and common application security vulnerabilities. 

• Ability to work effectively with software engineers and architects, translating security concerns into practical guidance that improves code and system design. 

• Broad security knowledge across cloud, network, and AI domains, with the ability to assess risk beyond the codebase and understand how controls interact across layers. 

• Experience assessing cloud security architectures and ident