Moderna

Moderna

API Security Engineer

325 Binney St - Cambridge - USA - MA, United States of America · Contract

No sponsorship$122k-$195kDetected 66 days ago
Backend DevelopmentAPI DevelopmentGraphQLRESTCybersecurityDetection EngineeringCommunicationCollaboration

Stay score

odds of building a lasting career here

55Sponsors, lottery-bound
Cap-exempt (no lottery)0
Sponsors this role85
Entry-level history0
PERM / green-card track0
Lottery odds (Level III)83
Fits your clock70

Sponsors, but it's cap-subject — you still face the weighted lottery (~45% per draw at Level III). Good if you win; have a cap-exempt backup on your list.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

Files H-1B transfers

1 transfer filing in the last year, covering 1 worker. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • Define and promote secure API engineering practices, including strong authentication, authorization, rate limiting, schema validation, secrets handling, and secure service-to-service communication.
  • Help shape security approaches for non-human and agentic identity models, including how services, automation, and software agents authenticate to APIs, obtain scoped access, and interact with sensitive systems safely.
  • Provide practical engineering guidance that helps teams improve API security while preparing for new trust and identity challenges introduced by automation and AI-enabled systems.

Responsibilities

  • As a Cybersecurity Engineer, you will help design, implement, and mature Moderna's approach to API security across modern applications, platform services, and AI-enabled use cases.
  • Help design, implement, and mature Moderna's API security capabilities across enterprise applications, shared services, integrations, and AI-related platforms.
  • Partner with application, platform, and engineering teams to identify insecure API designs, weak authentication or authorization patterns, excessive data exposure, and other common API security risks.
  • Analyze API telemetry and findings to identify abuse paths, misconfigurations, shadow APIs, and control gaps, then work with stakeholders to drive remediation.
  • Experience working with engineering and platform teams to improve API design, security posture, and operational controls.
  • Support the evaluation, deployment, and operationalization of API security technologies used for API discovery, posture assessment, traffic monitoring, anomaly detection, and policy enforcement.
  • Perform API-focused threat modeling and security assessments for modern services, microservices, integrations, and AI-enabled workflows.
  • Collaborate with broader security teams to connect API security findings with cloud, application, identity, and detection engineering workflows.
  • Ability to perform threat modeling and technical risk assessments for APIs, integrations, backend services, and machine-to-machine interaction patterns.
  • Working knowledge of cloud and application security fundamentals, including identity, secrets management, logging, and common security design patterns.

Requirements

  • 5+ years of experience in cybersecurity, application security, platform security, or a related engineering discipline, with meaningful hands-on experience in API security.
  • Familiarity with API gateways, service meshes, reverse proxies, or related control points used to secure and observe API traffic.
  • Strong analytical and troubleshooting skills, with the ability to turn technical findings into pragmatic remediation guidance.
  • Strong written and verbal communication skills, with the ability to work across technical and non-technical stakeholder groups.
  • Strong understanding of API security risks and controls, including authentication, authorization, token handling, rate limiting, data exposure, input validation, and service-to-service trust models.

Nice to have

  • Working knowledge of identity and access concepts relevant to non-human identities, workload identities, and emerging agentic access patterns is strongly preferred.
  • Familiarity with AI-enabled architectures or gateway patterns is a plus, particularly where APIs are used to broker access to models, tools, or sensitive data flows.

Skills

  • Experience assessing or securing REST, GraphQL, or other modern API patterns in cloud-native or distributed application environments.

Compensation

  • The salary range for this role is $121,600.00 - $194,500.00.

Company info

  • By living our mission, values, and mindsets every day, our people are the driving force behind our scientific progress and our culture.

Visa & Work Authorization

  • thout regard to a person's race, color, sex, gender identity or expression, age, religion, national origin, ancestry or citizenship, ethnicity, disability, military or protected veteran status, genetic information, sexua
Apply directly at Moderna →Create a free account for alerts like thisView Moderna immigration profile

This listing is sourced directly from Moderna's careers page and normalized into a canonical job model.