PenTesting Program Lead — Secure by Design

Antler Co; New Brunswick (NJ); On-site; USD 94,000 - 170,000; Full time

Job summary

Johnson & Johnson’s DePuy Synthes unit seeks a seasoned Professional, Program Lead, Penetration Testing Services in New Brunswick, NJ or other US locations. You will build and run the security testing program across devices, firmware, apps, APIs, and cloud services, embedding Secure by Design into the lifecycle.

Lead internal testers and vendors, translate findings into business risk, drive remediation, and report to leadership with governance and metrics. Strong communication is essential.

Qualifications

• Minimum 6 years of progressive experience in penetration testing or offensive security.
• Experience leading or managing a penetration testing program with governance.
• Hands‑on proficiency across web/API/mobile, network, wireless, and cloud testing.
• Knowledge of common testing tools and risk assessment methodologies (CVSS, OWASP).
• Excellent written and verbal communication to translate technical results for stakeholders.

Responsibilities

• Own the end-to-end penetration testing services program for products and platforms.
• Define and maintain testing methodology, scoping, rules of engagement, and reporting templates.
• Embed security testing gates into the product development lifecycle.
• Execute and oversee assessments across medical devices, firmware, apps, APIs, and cloud.
• Manage third‑party testers and vendors with SLAs and quality reviews.
• Triaging findings, assessing risk to patient safety, and driving remediation with R&D.

Skills

Penetration testing

Offensive security

Red teaming

Web/API/mobile testing

Cloud testing

Python/Bash/PowerShell

Education

Bachelor's degree in Computer Science, Cybersecurity, Software/Electrical/ Biomedical Engineering, Information Systems, or related technical discipline

Advanced degree or specialized cybersecurity education (preferred)

Tools

Burp Suite

Metasploit

Nmap

Wireshark

Ghidra/IDA

Kali

Job description

Johnson & Johnson’s DePuy Synthes unit seeks a seasoned Professional, Program Lead, Penetration Testing Services in New Brunswick, NJ or other US locations. You will build and run the security testing program across devices, firmware, apps, APIs, and cloud services, embedding Secure by Design into the lifecycle.

Lead internal testers and vendors, translate findings into business risk, drive remediation, and report to leadership with governance and metrics. Strong communication is essential.