MedTech Product Security Steward (Secure by Design)

Johnson & Johnson MedTech; New Brunswick (NJ); On-site; USD 79,000 - 142,000; Full time

Benefits offered by this job

Vacation – 120 hours

Sick time – 40 hours

Holiday pay – 13 days per year

Parental Leave

Volunteer Leave

Job summary

DePuy Synthes is recruiting for a Professional, Quality Steward in cybersecurity, located in New Brunswick, NJ or other sites. You will embed Secure by Design into the product lifecycle and work with R&D, Product Management, and Regulatory Affairs to ensure security requirements are defined early and sustained through postmarket monitoring.

The role focuses on risk assessments, SBOM management, vulnerability remediation, and regulatory documentation to support FDA/EU compliance.

Qualifications

• 4+ years of experience in product security or related cybersecurity discipline.
• Experience applying Secure by Design principles across a product development lifecycle.
• Hands-on experience with threat modeling methodologies for embedded, mobile, or connected systems.
• Familiarity with SBOM formats and third-party/open-source component risk management.

Responsibilities

• Serve as the product security steward for assigned product lines, embedding Secure by Design requirements into the lifecycle.
• Define and document security requirements with product owners and R&D during early design phases.
• Coordinate threat modeling and security reviews for connected devices and cloud services.
• Lead product security risk assessments aligned to regulatory guidance and industry standards.
• Generate and maintain SBOMs and monitor third-party components for vulnerabilities.

Skills

Product security

Application security

Threat modeling

SBOM

Vulnerability management

DevSecOps

Cloud security

Regulatory knowledge

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Master's degree in Cybersecurity or Biomedical Engineering

Tools

SAST

DAST

SCA

Threat modeling tools

Job description

DePuy Synthes is recruiting for a Professional, Quality Steward in cybersecurity, located in New Brunswick, NJ or other sites. You will embed Secure by Design into the product lifecycle and work with R&D, Product Management, and Regulatory Affairs to ensure security requirements are defined early and sustained through postmarket monitoring.

The role focuses on risk assessments, SBOM management, vulnerability remediation, and regulatory documentation to support FDA/EU compliance.