Product Security Steward for Med Devices

Johnson & Johnson MedTech; Warsaw (IN); On-site; USD 79,000 - 142,000; Full time

Job summary

Johnson & Johnson, through DePuy Synthes, seeks a Professional, Quality Steward to embed Secure by Design in the medical device product portfolio. You will partner with R&D, Product Management, Engineering, Regulatory Affairs, and Quality across the lifecycle to ensure security requirements are defined, designed, tested, and validated for postmarket monitoring.

The role requires 4+ years in product security, strong threat modeling, and experience with SBOMs, CVE analysis, and cyber regulatory

Qualifications

• 4+ years of experience in product security, application security, or related cybersecurity engineering.
• Experience applying Secure by Design across product lifecycle.
• Hands-on threat modeling for embedded, mobile, or connected systems.
• Knowledge of vulnerable classes and security testing tools (SAST, DAST, SCA).
• Experience with vulnerability management and SBOM generation.

Responsibilities

• Serve as product security steward for assigned product lines across lifecycle.
• Define security requirements, inputs, and acceptance criteria with stakeholders.
• Facilitate threat modeling and security reviews for devices and connected systems.
• Conduct product security risk assessments per standards like ISO 14971.
• Maintain SBOMs and monitor third-party components for vulnerabilities.
• Support secure development practices and CI/CD gate integration.
• Coordinate penetration testing and remediation tracking.
• Prepare cybersecurity documentation for regulatory submissions.

Skills

Product security

Secure by Design

Threat modeling

Vulnerability management

SBOM

CI/CD security

Regulatory alignment

Education

Bachelor's degree in Computer Science or Cybersecurity

Master's degree in Cybersecurity or Biomedical Engineering

Tools

SAST

DAST

SCA

SBOM formats (SPDX, CycloneDX)

Job description

Johnson & Johnson, through DePuy Synthes, seeks a Professional, Quality Steward to embed Secure by Design in the medical device product portfolio. You will partner with R&D, Product Management, Engineering, Regulatory Affairs, and Quality across the lifecycle to ensure security requirements are defined, designed, tested, and validated for postmarket monitoring.

The role requires 4+ years in product security, strong threat modeling, and experience with SBOMs, CVE analysis, and cyber regulatory