Principal MedTech Product Security Engineer (Remote)

Johnson & Johnson; New York (NY); Hybrid; USD 150,000 - 210,000; Full time

Job summary

Johnson & Johnson is seeking a Principal Product Security Engineer to lead security architecture for Heart Recovery devices. Based in Danvers, MA, you will drive threat modeling, risk assessments, and secure development lifecycle activities across the product lifecycle, including post-market support and customer questionnaires.

You will work within the Product Cybersecurity team to implement cryptographic controls, secure boot, data protection, and PKI/HSM integration, ensuring FDA/IEC

Qualifications

• Ten-plus years in information security or cybersecurity.
• Experience with embedded systems, medical devices, and IoT security.
• Ability to write security requirements for embedded systems and web platforms.

Responsibilities

• Define and implement Product Security strategy for Heart Recovery devices.
• Coordinate threat modeling, risk assessments, and secure development lifecycle activities.
• Oversee hardware security architecture, cryptographic controls, and secure OTA update processes.
• Respond to customer security questionnaires and contractual security language.

Skills

Information Security

Embedded security

Threat modeling

Risk assessments

Secure SDLC

Cloud security

Secure coding

HIPAA/GDPR

Education

Bachelor’s degree or equivalent

Tools

Job description

Johnson & Johnson is seeking a Principal Product Security Engineer to lead security architecture for Heart Recovery devices. Based in Danvers, MA, you will drive threat modeling, risk assessments, and secure development lifecycle activities across the product lifecycle, including post-market support and customer questionnaires.

You will work within the Product Cybersecurity team to implement cryptographic controls, secure boot, data protection, and PKI/HSM integration, ensuring FDA/IEC