Senior Security Engineer, Vulnerability Management

The Role

We are seeking a highly skilled and experienced Senior Security Engineer to join our dynamic team. The ideal candidate will have extensive experience in vulnerability management, patch management, and incident response. This role involves driving and executing vulnerability management processes, ensuring the security posture of enterprise assets, and supporting the incident response team. If you are passionate about cybersecurity and have a proactive approach to security, we would love to hear from you.

Here's What You'll Do

• Develop and implement a comprehensive vulnerability management program.

• Conduct regular vulnerability assessments and penetration testing to identify security weaknesses.

• Continuously monitor and assess publicly disclosed vulnerabilities to determine their potential impact on enterprise assets.

• Provide detailed analysis and reports on identified vulnerabilities specific to Moderna’s systems, assets, and environments, including risk assessments, mitigation recommendations, and remediation timelines.

• Stay up-to-date with the latest security threats, trends, and technologies to ensure the organization’s security measures are current and effective, working closely with our Threat Intelligence team.

• Prioritize and coordinate remediation efforts of identified vulnerabilities across multi-functional engineering and manufacturing partners.

• Develop and maintain metrics to measure the effectiveness of the vulnerability management program.

• Perform security assessments of applications, systems, and networks to ensure compliance with security policies and standards.

• Collaborate with development and infrastructure teams to integrate vulnerability management into the software development lifecycle (SDLC).

• Act as a key member of the incident response team to investigate and mitigate security incidents.

• Provide expertise and guidance during security incidents to ensure timely and effective resolution.

• Develop, review, and update security policies, procedures, and standards to enhance the security posture of the organization.

• Ensure compliance with relevant regulations and industry standards.

• Provide leadership and mentorship to junior security engineers and other IT staff.

• Work closely with cross-functional teams, including IT, development, and operations, to ensure alignment on security initiatives.

• Communicate effectively with executive leadership and other stakeholders regarding security risks and mitigation strategies.

Here’s What You’ll Need

• 6+ years of experience in information security, with a focus on vulnerability management.

• Strong knowledge of vulnerability management tools (e.g., Qualys, Nessus, Rapid7) and techniques.

• Experience with security assessment methodologies and penetration testing tools.

• In-depth understanding of security frameworks and standards (e.g., NIST, ISO 27001, CIS).

• Proven experience in incident response and handling security incidents.

• Excellent analytical, problem-solving, and communication skills.

• Relevant certifications such as CISSP, CISM, CEH, or GIAC are highly desirable.

Here’s What You’ll Bring to the Table

• Experience with cloud security (AWS, Azure, GCP).

• Familiarity with DevSecOps practices and integrating security into CI/CD pipelines.

• Knowledge of scripting and automation tools (e.g., Python, PowerShell).

Moderna offers personalized benefit programs and well-being resources as unique as our global workforce so employees can do their best work.

We recognize and appreciate your diverse needs and interests and do our best to support you at work and at home with:

• Quality healthcare and insurance benefits
• Lifestyle Spending Accounts to create your own pathway to well-being
• Free premium access to fitness, nutrition, and mindfulness classes
• Family planning and adoption benefits
• Generous paid time off, including vacation, bank holidays, volunteer days, sabbatical, and a discretionary year-end shutdown
• Educational resources
• Savings and investments
• Location-specific perks and extras!

The benefits offered may vary depending on the nature of your employment with Moderna and the country where you work.

About Moderna

Since our founding in 2010, we have aspired to build the leading mRNA technology platform, the infrastructure