Product Security Engineer - MedTech Solutions

Johnson & Johnson MedTech; West Chester (Chester County); On-site; USD 79,000 - 142,000; Full time

Job summary

Johnson & Johnson is seeking an Exp, Analyst, Security Engineer Product to safeguard DePuy Synthes digital products across multiple sites in the US. The role partners with engineering, quality, regulatory, and IT to embed security throughout the product lifecycle and protect patient safety.

You will perform risk assessments, threat modeling, and security testing while aligning with regulatory expectations. This is a regulated, innovation-driven environment with opportunities to impact product

Qualifications

• 2–4 years of professional cybersecurity or product security experience.
• Knowledge of secure development lifecycle and security-by-design.
• Experience with security risk assessments, threat modeling, or vulnerability analysis.
• Familiarity with ISO, NIST, OWASP standards.
• Ability to collaborate with cross-functional teams.

Responsibilities

• Integrate security requirements into digital and connected products.
• Perform product security risk assessments and threat modeling.
• Support secure design reviews with product development, quality, regulatory.
• Assist security testing including SAST, DAST, and vulnerability validation.
• Track and close product security findings with governance.
• Contribute to development of product security standards and best practices.
• Monitor cybersecurity threats and regulatory guidance for medical devices.
• Support audits and regulatory inquiries related to product cybersecurity.

Skills

Cybersecurity

SDLC security

Threat modeling

Vulnerability analysis

Cross-functional collaboration

Documentation

Regulatory knowledge

Education

Bachelor’s in CS/Engineering/Info Security

Master’s in Cybersecurity/Computer Engineering

Tools

SAST

DAST

Dependency scanning

Job description

Johnson & Johnson is seeking an Exp, Analyst, Security Engineer Product to safeguard DePuy Synthes digital products across multiple sites in the US. The role partners with engineering, quality, regulatory, and IT to embed security throughout the product lifecycle and protect patient safety.

You will perform risk assessments, threat modeling, and security testing while aligning with regulatory expectations. This is a regulated, innovation-driven environment with opportunities to impact product