Product Security Engineer & Analyst (Healthcare Tech)

6090-Johnson & Johnson Services Inc. Legal Entity; New Brunswick (NJ); On-site; USD 79,000 - 142,000; Full time

Job summary

Johnson & Johnson is recruiting a Exp, Analyst, Security Engineer Product to protect DePuy Synthes digital products and connected medical technologies. You will embed security into the product lifecycle, partner with engineering, regulatory, and IT teams, and drive secure design reviews and remediation.

The role requires 2–4 years of cybersecurity/product security experience, knowledge of SDLC security, and familiarity with ISO/NIST/OWASP. Travel up to 10% domestic; base pay range disclosed.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Security, or related technical field.
• 2–4 years of cybersecurity/product security/secure software development experience.
• Experience with secure development lifecycle (SDLC) and security-by-design principles.
• Familiarity with ISO, NIST, OWASP standards/frameworks.
• Ability to collaborate with cross‑functional teams and strong analytical/communication skills.
• Preferred: experience in regulated industries and hands-on security testing tools.

Responsibilities

• Integrate security requirements and controls into the design and development of digital/product systems.
• Conduct security risk assessments, threat modeling, and vulnerability analysis across the lifecycle.
• Collaborate with product development, quality, regulatory, and IT to support secure reviews and remediation.
• Support security testing activities (SAST/DAST, vulnerability validation).
• Track and close security findings following governance processes.
• Help develop and maintain product security standards and best practices.
• Monitor cybersecurity threats and regulatory guidance related to medical devices and digital health.
• Assist audits and regulatory inquiries related to product cybersecurity.

Skills

Security fundamentals

Threat modeling

Secure SDLC

Cross-functional teamwork

Documentation

Communication

Education

Bachelor's degree

Master's degree (preferred)

Tools

SAST

DAST

Dependency scanning

Job description

Johnson & Johnson is recruiting a Exp, Analyst, Security Engineer Product to protect DePuy Synthes digital products and connected medical technologies. You will embed security into the product lifecycle, partner with engineering, regulatory, and IT teams, and drive secure design reviews and remediation.

The role requires 2–4 years of cybersecurity/product security experience, knowledge of SDLC security, and familiarity with ISO/NIST/OWASP. Travel up to 10% domestic; base pay range disclosed.