Product Security Engineer (Medical Devices)

Johnson & Johnson Co.; New Brunswick (NJ); On-site; USD 110,000 - 160,000; Full time

Job summary

DePuy Synthes is seeking an Exp, Analyst, Security Engineer Product to embed security into digital medical products. The role supports the protection of product security across the lifecycle and partners with engineering, quality, regulatory, and IT teams to design secure solutions.

You will conduct risk assessments, threat modeling, and vulnerability analyses, coordinate security testing, and help ensure regulatory compliance.

Qualifications

• 2–4 years of relevant professional experience in cybersecurity, product security, or secure software development.
• Working knowledge of secure development lifecycle (SDLC) practices and security‑by‑design principles.
• Experience conducting security risk assessments, threat modeling, or vulnerability analysis.
• Familiarity with common security standards and frameworks (e.g., ISO, NIST, OWASP).
• Ability to collaborate effectively with cross‑functional technical and non‑technical teams.
• Strong analytical, documentation, and communication skills.

Responsibilities

• Integrate security requirements and controls into the design and development of digital and connected products.
• Perform product security risk assessments, threat modeling, and vulnerability analysis across the product lifecycle.
• Partner with product development, quality, and regulatory teams to support secure design reviews and remediation activities.
• Support security testing activities, including static and dynamic analysis, penetration testing coordination, and vulnerability validation.
• Track, document, and manage product security findings to closure in alignment with internal governance processes.
• Contribute to the development and maintenance of product security standards, procedures, and best practices.
• Monitor emerging cybersecurity threats, vulnerabilities, and regulatory guidance relevant to medical devices and digital health.
• Support audits, assessments, and regulatory inquiries related to product cybersecurity.

Skills

Cybersecurity

Product security

SDLC knowledge

Threat modeling

Regulatory understanding

Cross-functional collaboration

Documentation

Communication

Education

Bachelor’s degree in Computer Science, Engineering, Information Security, or related field

Master’s degree in Cybersecurity, Computer Engineering, or related discipline

Tools

SAST

DAST

Dependency scanning

Job description

DePuy Synthes is seeking an Exp, Analyst, Security Engineer Product to embed security into digital medical products. The role supports the protection of product security across the lifecycle and partners with engineering, quality, regulatory, and IT teams to design secure solutions.

You will conduct risk assessments, threat modeling, and vulnerability analyses, coordinate security testing, and help ensure regulatory compliance.