AJAX call to https endopint = secure?

I am planning a Cordova mobile application (a Meteor.js app to be precise) and I need to POST/GET some sensitive data from a remote server securely.

When the request is pointed at https endpoint is it secure? My guess is that it does not work this way.

Just to say - I have read some SO questions and searched google but most of them refer to CORS problems, which I am not facing.

Thanks for any help.