Product Security Engineer - Medical Devices

Johnson & Johnson MedTech; Warsaw (IN); On-site; USD 79,000 - 142,000; Full time

Job summary

Johnson & Johnson is recruiting a Security Engineer for DePuy Synthes products, located in multiple U.S. sites including IN, NJ, PA, FL. This role protects digital medical devices across the product lifecycle, partnering with engineering, quality, regulatory, and IT to embed secure practices and meet regulatory expectations.

The position offers exposure to cyber risk management in a highly regulated environment, with travel up to 10% domestic and emphasis on patient safety and product trust.

Qualifications

• 2–4 years of cybersecurity or secure software development experience.
• Familiarity with SDLC and security-by-design principles.
• Experience with security risk assessments, threat modeling, or vulnerability analysis.
• Knowledge of ISO, NIST, OWASP standards/frameworks.
• Ability to collaborate with cross-functional technical and non-technical teams.
• Strong analytical, documentation, and communication skills.

Responsibilities

• Integrate security requirements and controls into product design and development.
• Conduct risk assessments, threat modeling, and vulnerability analysis across the lifecycle.
• Partner with development, quality, and regulatory teams for secure design reviews and remediation.
• Support security testing activities including SAST/DAST and vulnerability validation.
• Track and close product security findings per governance processes.
• Contribute to security standards, procedures, and best practices.
• Monitor cybersecurity threats and regulatory guidance for medical devices/digital health.
• Assist audits and regulatory inquiries related to product cybersecurity.

Skills

Cybersecurity

Threat modeling

Vulnerability analysis

Secure SDLC

ISO/NIST/OWASP

Cross-functional collaboration

Analytical skills

Education

Bachelor’s degree in CS/Engineering/Info Security

Master’s degree in Cybersecurity/Computer Engineering

Job description

Johnson & Johnson is recruiting a Security Engineer for DePuy Synthes products, located in multiple U.S. sites including IN, NJ, PA, FL. This role protects digital medical devices across the product lifecycle, partnering with engineering, quality, regulatory, and IT to embed secure practices and meet regulatory expectations.

The position offers exposure to cyber risk management in a highly regulated environment, with travel up to 10% domestic and emphasis on patient safety and product trust.