Product Security Analyst & Engineer (MedTech)

Johnson & Johnson MedTech; Raynham (MA); On-site; USD 90,000 - 130,000; Full time

Job summary

Johnson & Johnson’s DePuy Synthes Technology organization seeks an Exp, Analyst, Security Engineer Product in New Brunswick, NJ or West Chester, PA or Raynham, MA. This role embeds security across the product lifecycle for digital and connected medical devices, partnering with engineering, quality, and regulatory teams to design secure solutions and ensure regulatory compliance.

Responsibilities include threat modeling, risk assessments, remediation coordination, and ongoing security testing to

Qualifications

• Bachelor’s degree in a technical field; Master’s preferred in cybersecurity or related discipline.
• Experience with security risk assessments, threat modeling, or vulnerability analysis.
• Familiarity with ISO, NIST, OWASP standards; ability to work with cross-functional teams.

Responsibilities

• Integrate security requirements into design and development of digital/connected products.
• Perform security risk assessments, threat modeling, and vulnerability analysis across the lifecycle.
• Support secure design reviews, remediation activities, and governance processes.
• Coordinate security testing (SAST/DAST), tracking findings to closure.
• Monitor regulatory guidance relevant to medical devices and digital health.

Skills

Security risk assessments

Threat modeling

Vulnerability analysis

Secure SDLC

Regulatory standards (ISO/NIST/OWASP)

Cross-functional collaboration

Documentation & communication

Education

Bachelor’s degree in Computer Science/Engineering/Info Security

Master’s preferred: Cybersecurity/Computer Engineering

Job description

Johnson & Johnson’s DePuy Synthes Technology organization seeks an Exp, Analyst, Security Engineer Product in New Brunswick, NJ or West Chester, PA or Raynham, MA. This role embeds security across the product lifecycle for digital and connected medical devices, partnering with engineering, quality, and regulatory teams to design secure solutions and ensure regulatory compliance.

Responsibilities include threat modeling, risk assessments, remediation coordination, and ongoing security testing to