Product Security Engineer Analyst for Medical Devices (Hybrid)

Johnson & Johnson Co.; New Brunswick (NJ); On-site; USD 79,000 - 142,000; Full time

Job summary

Johnson & Johnson's DePuy Synthes unit seeks an Experienced Analyst, Security Engineer Product in the US to embed security throughout the product lifecycle. You will work with engineering, quality, regulatory and IT teams to identify risks, design secure solutions, and ensure medical devices meet cybersecurity and regulatory expectations.

This role supports audits, threat modeling, risk assessments, and the development of security standards.

Qualifications

• Requires Bachelor’s degree in Computer Science, Engineering, Information Security, or related field.
• Master’s degree preferred in Cybersecurity or related discipline.

Responsibilities

• Integrate security requirements into design and development of digital/connected products.
• Conduct product security risk assessments, threat modeling, and vulnerability analysis.
• Collaborate with product development, quality, and regulatory teams for secure reviews.

Skills

Cybersecurity

Product security

SDLC

Threat modeling

Vulnerability analysis

Regulatory compliance

Education

Bachelor’s in CS/Engineering/InfoSec

Master’s in Cybersecurity/Related

Tools

SAST

DAST

Dependency scanning

Job description

Johnson & Johnson's DePuy Synthes unit seeks an Experienced Analyst, Security Engineer Product in the US to embed security throughout the product lifecycle. You will work with engineering, quality, regulatory and IT teams to identify risks, design secure solutions, and ensure medical devices meet cybersecurity and regulatory expectations.

This role supports audits, threat modeling, risk assessments, and the development of security standards.