Penetration Testing Program Lead

Johnson & Johnson MedTech; New Brunswick (NJ); On-site; USD 94,000 - 170,000; Full time

Job summary

Johnson & Johnson (DePuy Synthes) is seeking a seasoned Professional, Program Lead, Penetration Testing Services in New Brunswick, NJ or West Chester, PA or Palm Beach Gardens, FL or Warsaw, IN or Raynham, MA. The role leads the end-to-end testing program across medical devices, firmware, mobile apps, APIs, and cloud services.

The position requires 6+ years in security testing, vendor management, and SDLC integration, with strong communication, regulatory awareness, and hands-on tool

Qualifications

• Minimum 6 years of progressive experience in penetration testing, offensive security, red teaming, or application security assessment.
• Experience leading or managing a penetration testing program, including methodology definition, scoping standards, and vendor oversight.
• Hands-on proficiency across web, API, mobile, network, wireless, and cloud penetration testing.
• Strong understanding of vulnerability classes (OWASP Top 10, CWE) and risk scoring (CVSS).

Responsibilities

• Own the end-to-end penetration testing services program for products and connected platforms, including roadmap and capacity planning.
• Define and maintain the penetration testing methodology, scoping standards, rules of engagement, and reporting templates.
• Embed security testing gates into the product development lifecycle to ensure Secure by Design verification.
• Execute and oversee hands-on assessments across medical devices, firmware, apps, APIs, and cloud infrastructure.
• Manage third-party testing vendors, including scoping, SOW development, and performance reviews.
• Triage and validate findings, assess exploitability, and communicate risks to stakeholders.

Skills

Information Security

Solution Architecture

Technical Writing

Problem Solving

Communication

Education

Bachelor's degree in Computer Science or related field

Tools

Burp Suite

Metasploit

Nmap

Wireshark

Ghidra/IDA

Kali

Python

Job description

Johnson & Johnson (DePuy Synthes) is seeking a seasoned Professional, Program Lead, Penetration Testing Services in New Brunswick, NJ or West Chester, PA or Palm Beach Gardens, FL or Warsaw, IN or Raynham, MA. The role leads the end-to-end testing program across medical devices, firmware, mobile apps, APIs, and cloud services.

The position requires 6+ years in security testing, vendor management, and SDLC integration, with strong communication, regulatory awareness, and hands-on tool