Product Security Engineer for MedTech

Antler Co; New Brunswick (NJ); On-site; USD 79,000 - 142,000; Full time

Job summary

Johnson & Johnson is seeking an Exp, Analyst, Security Engineer Product for DePuy Synthes to protect digital medical products across the lifecycle. You will embed security into design, partner with engineering and regulatory teams, and help ensure cybersecurity and regulatory requirements are met.

The role supports patient safety and product trust in a highly regulated, innovation‑driven space, reporting to the DePuy Synthes Technology organization.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Security, or a related technical field.
• 2–4 years of relevant professional experience in cybersecurity, product security, or secure software development.
• Working knowledge of secure development lifecycle (SDLC) practices and security-by-design principles.
• Experience conducting security risk assessments, threat modeling, or vulnerability analysis.

Responsibilities

• Integrate security requirements and controls into the design and development of digital and connected products.
• Perform product security risk assessments, threat modeling, and vulnerability analysis across the product lifecycle.
• Partner with product development, quality, and regulatory teams to support secure design reviews and remediation activities.
• Support security testing activities, including static and dynamic analysis, penetration testing coordination, and vulnerability validation.
• Track, document, and manage product security findings to closure in alignment with internal governance processes.
• Contribute to the development and maintenance of product security standards, procedures, and best practices.
• Monitor emerging cybersecurity threats, vulnerabilities, and regulatory guidance relevant to medical devices and digital health.
• Support audits, assessments, and regulatory inquiries related to product cybersecurity.

Skills

Analytical reasoning

Coaching

Communication

Cross-Functional collaboration

Threat modeling

Risk assessment

Security analysis

Education

Bachelor’s degree in CS/Engineering

Master’s degree in Cybersecurity

Tools

SAST

DAST

Dependency scanning

Job description

Johnson & Johnson is seeking an Exp, Analyst, Security Engineer Product for DePuy Synthes to protect digital medical products across the lifecycle. You will embed security into design, partner with engineering and regulatory teams, and help ensure cybersecurity and regulatory requirements are met.

The role supports patient safety and product trust in a highly regulated, innovation‑driven space, reporting to the DePuy Synthes Technology organization.