Product Security Steward – Medical Devices

Antler Co; West Chester (Chester County); On-site; USD 79,000 - 142,000; Full time

Job summary

Johnson & Johnson is recruiting a Professional, Quality Steward for cybersecurity within the DePuy Synthes portfolio. The role embeds Secure by Design across the product lifecycle, collaborating with R&D, Product Management, Engineering, Regulatory Affairs, and Quality to ensure security requirements are defined early and verified through testing.

Based in the US with responsibilities across New Brunswick NJ, West Chester PA, Palm Beach Gardens FL, Warsaw IN, or Raynham MA, the role interfaces

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Software/Biomedical/ Electrical Engineering, Information Systems, or a related technical discipline.
• Master's degree in Cybersecurity, Computer Science, or Biomedical Engineering.
• 4+ years in product security, application security, or related cybersecurity engineering.
• Experience applying Secure by Design across a product lifecycle.
• Threat modeling experience for embedded, mobile, or connected systems.
• Knowledge of secure coding, OWASP Top 10, CWE; SAST/DAST/ SCA tools.
• Experience with vulnerability management and SBOMs.

Responsibilities

• Serve as product security steward for assigned lines, embedding Secure by Design in lifecycle from concept to end of support.
• Define security requirements, design inputs, and acceptance criteria with product owners and R&D teams.
• Facilitate threat modeling and security reviews for devices, embedded software, mobile apps, and cloud services.

Skills

Product security

Threat modeling

Secure by Design

Vulnerability management

Regulatory collaboration

Security architecture reviews

SBOM generation

CI/CD security gates

Communication skills

Education

Bachelor's degree in Computer Science or Cybersecurity

Master's degree in Cybersecurity or Biomedical Engineering

Tools

SAST tools

DAST tools

SCA tools

SBOM formats SPDX/CycloneDX

Cloud security (AWS/Azure)

Job description

Johnson & Johnson is recruiting a Professional, Quality Steward for cybersecurity within the DePuy Synthes portfolio. The role embeds Secure by Design across the product lifecycle, collaborating with R&D, Product Management, Engineering, Regulatory Affairs, and Quality to ensure security requirements are defined early and verified through testing.

Based in the US with responsibilities across New Brunswick NJ, West Chester PA, Palm Beach Gardens FL, Warsaw IN, or Raynham MA, the role interfaces