Product Security Analyst for Connected Medical Devices

Antler Co; West Chester (Chester County); On-site; USD 79,000 - 142,000; Full time

Job summary

Johnson & Johnson is seeking an Exp, Analyst, Security Engineer Product to protect DePuy Synthes digital and connected devices across multiple U.S. locations.

You will embed security throughout the product lifecycle, partner with engineering, quality, and regulatory teams, and help ensure cybersecurity and regulatory compliance. The role emphasizes collaboration, risk assessment, threat modeling, and vulnerability management in a highly regulated environment to safeguard patient safety and

Qualifications

• Bachelor’s degree in a technical field is required.
• Master’s degree is preferred for advanced cybersecurity focus.
• Ability to apply secure SDLC and design-for-security principles.

Responsibilities

• Integrate security requirements and controls into digital and connected products.
• Perform security risk assessments, threat modeling, and vulnerability analysis across the lifecycle.
• Collaborate with product development, quality, and regulatory teams for secure design reviews.
• Support security testing activities including SAST/DAST and vulnerability validation.
• Track and close product security findings per governance processes.
• Develop and maintain product security standards and practices.
• Monitor cybersecurity threats and regulatory guidance for medical devices and digital health.
• Assist audits and regulatory inquiries related to product cybersecurity.

Skills

Analytical Reasoning

Coaching

Communication

Cross-Functional Collaboration

Demand Forecasting

HCI

Persistence and Tenacity

Product Costing

Product Development

Product Strategies

Quality Assurance

Research and Development

Software Development Management

Technical Credibility

Technologically Savvy

Education

Bachelor’s degree in Computer Science, Engineering, Information Security, or related field

Master’s degree in Cybersecurity, Computer Engineering, or related discipline

Job description

Johnson & Johnson is seeking an Exp, Analyst, Security Engineer Product to protect DePuy Synthes digital and connected devices across multiple U.S. locations.

You will embed security throughout the product lifecycle, partner with engineering, quality, and regulatory teams, and help ensure cybersecurity and regulatory compliance. The role emphasizes collaboration, risk assessment, threat modeling, and vulnerability management in a highly regulated environment to safeguard patient safety and