Product Security Engineer – Medical Devices

Johnson & Johnson MedTech; New Brunswick (NJ); On-site; USD 79,000 - 142,000; Full time

Job summary

DePuy Synthes, a Johnson & Johnson company, is seeking an experienced Exp, Analyst, Security Engineer Product to secure digital medical devices and connected health products. You will embed security practices across the product lifecycle and collaborate with engineering, quality, regulatory, and IT teams to identify risks and design secure solutions.

The role supports patient safety and product trust in a highly regulated, innovation-driven environment and reports to the DePuy Synthes Technology

Qualifications

• Bachelor’s degree in a technical field required.
• Master’s degree preferred for advanced cybersecurity focus.

Responsibilities

• Integrate security requirements into design and development of digital/connected products.
• Perform product security risk assessments, threat modeling, and vulnerability analysis across the product lifecycle.
• Collaborate with product development, quality, and regulatory teams for secure design reviews.
• Support security testing activities (SAST/DAST), coordination, and remediation.
• Document and track security findings to closure per governance processes.
• Contribute to security standards, procedures, and best practices.
• Monitor cyber threats and regulatory guidance relevant to medical devices/digital health.
• Assist audits and regulatory inquiries related to product cybersecurity.

Skills

Analytical Reasoning

Coaching

Communication

Cross-Functional Collaboration

Threat Modeling

HCI

Secure SDLC

Risk Assessment

Regulatory Knowledge

Education

Bachelor’s degree in Computer Science/Engineering/Info Security

Master’s degree in Cybersecurity/Computer Engineering

Tools

SAST

DAST

Dependency Scanning

Job description

DePuy Synthes, a Johnson & Johnson company, is seeking an experienced Exp, Analyst, Security Engineer Product to secure digital medical devices and connected health products. You will embed security practices across the product lifecycle and collaborate with engineering, quality, regulatory, and IT teams to identify risks and design secure solutions.

The role supports patient safety and product trust in a highly regulated, innovation-driven environment and reports to the DePuy Synthes Technology