Lead Product Security Engineer – MedTech & Connected Devices

6267-Auris Health Inc. Legal Entity; Santa Clara (CA); On-site; USD 118,000 - 204,000; Full time

Job summary

Johnson & Johnson’s MedTech cybersecurity team seeks a Principal Product Security Engineer in Santa Clara, CA. You will secure connected medical devices, embedded platforms, and cloud services across the product lifecycle, guiding remediation and validating controls in regulated medical device products.

You will lead threat modeling, security testing, and risk assessments, partnering with cross‑functional teams to balance patient safety, clinical workflow, and product constraints.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Software Engineering or equivalent.
• 8+ years in cybersecurity, product security, cloud security or related fields.
• Experience with threat modeling, secure software development, vulnerability management and risk assessment.
• Experience securing embedded systems, connected medical devices, IoT or robotics platforms.
• Strong understanding of authentication, cryptography, secure boot and OS hardening.

Responsibilities

• Lead cybersecurity design, verification, remediation and risk treatment across medical device and digital health programs.
• Develop and review cybersecurity requirements for embedded systems, cloud services and connected devices.
• Lead threat modeling activities and perform risk assessments across product features.
• Coordinate security testing, vulnerability management and post‑market security activities.
• Contribute to regulatory submissions, quality documentation and supplier security reviews.

Skills

Security leadership

Threat modelling

Secure development

Embedded systems

Cloud security

Vulnerability management

Education

Bachelor's degree in CS/Engineering

Equivalent practical experience

Tools

AWS

Azure

Security testing tools

Job description

Johnson & Johnson’s MedTech cybersecurity team seeks a Principal Product Security Engineer in Santa Clara, CA. You will secure connected medical devices, embedded platforms, and cloud services across the product lifecycle, guiding remediation and validating controls in regulated medical device products.

You will lead threat modeling, security testing, and risk assessments, partnering with cross‑functional teams to balance patient safety, clinical workflow, and product constraints.