Penetration Testing Program Lead — MedTech Security

Johnson & Johnson MedTech; Raynham (MA); On-site; USD 94,000 - 170,000; Full time

Benefits offered by this job

Vacation time 120 hours/yr

Sick time 40 hours/yr

Parental Leave 480 hours/yr

Job summary

Johnson & Johnson MedTech is recruiting for a Professional, Program Lead, Penetration Testing Services. The role leads the penetration testing program across medical devices, embedded firmware, mobile apps, APIs and cloud services, embedding Secure by Design in the development lifecycle and coordinating internal testers with third-party partners.

You will translate findings into patient safety risk and business risk, drive remediation with R&D and engineering, and report metrics to leadership.

Qualifications

• Bachelor's degree in CS, Cybersecurity, Software/Electrical/ Biomedical Engineering, Information Systems or related field.
• Advanced cybersecurity education preferred.
• 6+ years of penetration testing, offensive security, red teaming, or application security experience.

Responsibilities

• Own end-to-end penetration testing services program including roadmap and capacity planning.
• Define testing methodology, scoping standards, rules of engagement, and reporting templates.
• Embed security testing gates into the product development lifecycle and ensure Secure by Design verification.

Skills

Business Alignment

Technical Writing

Critical Thinking

Solution Architecture

Emerging Technologies

Education

Bachelor's degree in CS/Engineering

Advanced cybersecurity education

Tools

Burp Suite

Metasploit

Nmap

Wireshark

Ghidra/IDA

Kali

Job description

Johnson & Johnson MedTech is recruiting for a Professional, Program Lead, Penetration Testing Services. The role leads the penetration testing program across medical devices, embedded firmware, mobile apps, APIs and cloud services, embedding Secure by Design in the development lifecycle and coordinating internal testers with third-party partners.

You will translate findings into patient safety risk and business risk, drive remediation with R&D and engineering, and report metrics to leadership.