Product Security Engineer – Medical Devices

Biopharma Asia; New Brunswick (NJ); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Johnson & Johnson's DePuy Synthes division is hiring an Exp, Analyst, Security Engineer Product for New Brunswick, NJ, or adjacent locations. You will embed security across the lifecycle of digital medical products, collaborating with engineering, quality, and regulatory teams to design secure solutions and meet cybersecurity and regulatory standards.

This role emphasizes threat modeling, risk assessments, and hands-on security testing in a highly regulated environment, contributing to patient

Qualifications

• Bachelor's degree in CS, Engineering, Information Security, or related field.
• Master’s degree preferred in Cybersecurity or related discipline.
• 2–4 years of professional cybersecurity or secure software development experience.
• Familiarity with ISO, NIST, OWASP standards.
• Ability to collaborate with cross-functional teams and communicate clearly.
• Certifications (Preferred): CISSP, CSSLP, GSEC or equivalent.

Responsibilities

• Integrate security requirements into design of digital and connected products.
• Perform product security risk assessments, threat modeling, vulnerability analysis.
• Support secure design reviews with product development, quality, and regulatory teams.
• Coordinate security testing activities: SAST, DAST, and vulnerability validation.
• Track security findings through to remediation in line with governance processes.
• Develop and maintain product security standards, procedures, and best practices.
• Monitor cybersecurity threats and regulatory guidance for medical devices and digital health.
• Assist audits and regulatory inquiries related to product cybersecurity.

Skills

Cybersecurity experience

Security risk assessment

Threat modeling

Vulnerability analysis

Cross-functional collaboration

Documentation skills

Communication skills

Regulatory knowledge

Education

Bachelor’s degree in Computer Science, Engineering, Information Security, or related field

Master’s degree in Cybersecurity, Computer Engineering, or related discipline

Tools

SAST

DAST

Dependency scanning

Job description

Johnson & Johnson's DePuy Synthes division is hiring an Exp, Analyst, Security Engineer Product for New Brunswick, NJ, or adjacent locations. You will embed security across the lifecycle of digital medical products, collaborating with engineering, quality, and regulatory teams to design secure solutions and meet cybersecurity and regulatory standards.

This role emphasizes threat modeling, risk assessments, and hands-on security testing in a highly regulated environment, contributing to patient