Product Security Engineer - Medical Devices & SDLC

Brighter Signals; New Brunswick (NJ); On-site; USD 110,000 - 160,000; Full time

Job summary

DePuy Synthes is seeking an Exp, Analyst, Security Engineer Product to protect digital products and connected medical technologies across the lifecycle. The role partners with engineering, quality, regulatory, and IT to identify risks, design secure solutions, and ensure cybersecurity and regulatory compliance.

This role supports patient safety and product trust in a highly regulated environment, reporting into the Technology organization. Travel up to 10% may be required.

Qualifications

• 2–4 years of cybersecurity/product security/secure software development experience.
• Secure development lifecycle (SDLC) practices and security-by-design principles.
• Experience conducting security risk assessments, threat modeling, or vulnerability analysis.
• Familiarity with ISO, NIST, OWASP standards.
• Ability to collaborate with cross-functional teams.
• Strong analytical, documentation, and communication skills.

Responsibilities

• Integrate security requirements into design and development of digital and connected products.
• Perform product security risk assessments, threat modeling, and vulnerability analysis across the product lifecycle.
• Partner with product development, quality, and regulatory teams for secure design reviews.
• Support security testing activities, including SAST/DAST coordination and vulnerability validation.
• Track, document, and manage product security findings to closure.
• Contribute to development and maintenance of product security standards and best practices.
• Monitor cybersecurity threats and regulatory guidance for medical devices and digital health.
• Support audits, assessments, and regulatory inquiries related to product cybersecurity.

Education

Bachelor’s degree in Computer Science, Engineering, Information Security, or a related technical field

Master’s degree in Cybersecurity, Computer Engineering, or a related discipline

Tools

SAST

DAST

Dependency scanning

Cloud security concepts

Job description

DePuy Synthes is seeking an Exp, Analyst, Security Engineer Product to protect digital products and connected medical technologies across the lifecycle. The role partners with engineering, quality, regulatory, and IT to identify risks, design secure solutions, and ensure cybersecurity and regulatory compliance.

This role supports patient safety and product trust in a highly regulated environment, reporting into the Technology organization. Travel up to 10% may be required.