Cybersecure Medical Device Quality Steward

Johnson & Johnson Innovative Medicine; Town of Florida (NY); Hybrid; USD 79,000 - 142,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Johnson & Johnson’s DePuy Synthes unit is seeking a Professional, Quality Steward to embed Secure by Design across the product portfolio. You will partner with R&D, Product Management, Engineering, Regulatory, and Quality to ensure security is defined early, designed in, tested, and sustained post-market.

You will lead threat modeling, risk assessments, SBOM management, and regulatory documentation while coordinating with internal and external assessors to safeguard patients and regulators.

Qualifications

• 4+ years of product security or cybersecurity engineering experience.
• Experience applying Secure by Design across product lifecycle.
• Familiarity with threat modeling for embedded, mobile, or connected systems.
• Knowledge of OWASP Top 10, CWE and security testing tools.

Responsibilities

• Embed Secure by Design in the product lifecycle from concept to end-of-support.
• Define security requirements and acceptance criteria with cross-functional teams.
• Coordinate threat modeling and security reviews for devices and connected services.
• Conduct cybersecurity risk assessments per ISO 14971 and AAMI TIR57.
• Manage SBOMs and track third-party component vulnerabilities.
• Support secure SDLC practices and CI/CD security gates.
• Coordinate penetration testing and remediation with teams and assess patient safety impact.
• Prepare cybersecurity documentation for regulatory submissions (FDA, EU MDR).
• Oversee postmarket vulnerability management and customer advisories.
• Develop customer-facing security artifacts and participate in audits and disclosures.

Skills

Secure by Design

Threat modeling

Regulatory and safety framing

SAST/DAST/ SCA tools

SBOM management

Security in SDLC

Communication with stakeholders

Education

Bachelor’s degree in Computer Science or related

Master’s degree in Cybersecurity or Biomedical Engineering

Tools

SBOM formats SPDX/CycloneDX

Cloud security (AWS/Azure)

Regulatory submission support tools

Job description

Johnson & Johnson’s DePuy Synthes unit is seeking a Professional, Quality Steward to embed Secure by Design across the product portfolio. You will partner with R&D, Product Management, Engineering, Regulatory, and Quality to ensure security is defined early, designed in, tested, and sustained post-market.

You will lead threat modeling, risk assessments, SBOM management, and regulatory documentation while coordinating with internal and external assessors to safeguard patients and regulators.