# API Security Engineer

Hiring organization: [Moderna](https://career.thegoodapps.co/organizations/moderna)

Canonical page: https://career.thegoodapps.co/jobs/e565610a-2ad7-424b-803c-f6f02582768b

Listed on Moderna's own careers site. Applications go to them directly.

- Seniority: Mid
- Salary: 145900 – 234200 USD per year

## Summary

This role involves securing APIs across Moderna's enterprise applications and AI platforms by designing controls, assessing risks, and collaborating with engineering teams to improve authentication, authorization, and data protection. It suits cybersecurity professionals with hands-on API security experience who can bridge technical implementation with strategic identity and access governance as the company scales AI-enabled systems.

_Our summary, not Moderna's wording._

## Skills named

Cloud Security, GraphQL, Identity And Access Management, Retrofit (REST), Threat Modeling

## Required

- 5+ years of cybersecurity, application security, or platform security experience with hands-on API security work
- Strong understanding of API security risks and controls including authentication, authorization, token handling, rate limiting, and data exposure
- Experience assessing or securing REST, GraphQL, or other modern API patterns in cloud-native environments
- Experience working with engineering teams to improve API design and security posture
- Ability to perform threat modeling and technical risk assessments for APIs and integrations

## Nice to have

- Working knowledge of identity and access concepts relevant to non-human identities and emerging agentic access patterns
- Familiarity with AI-enabled architectures or gateway patterns, particularly where APIs broker access to models or sensitive data

Apply on Moderna's site: https://modernatx.wd1.myworkdayjobs.com/en-US/M_tx/job/Cambridge-Massachusetts/API-Security-Engineer_R19423