Product Security Steward – Medical Devices

Johnson & Johnson MedTech; West Chester (Chester County); On-site; USD 79,000 - 142,000; Full time

Job summary

Johnson & Johnson is seeking a Professional, Quality Steward for DePuy Synthes to embed Secure by Design in the full product lifecycle across medical devices and connected products. You will partner with R&D, Product Management, Engineering, and Regulatory to ensure security requirements are defined early and sustained through postmarket monitoring.

The role requires 4+ years in product security, familiarity with SBOMs, threat modeling, and cybersecurity testing tools.

Qualifications

• 4+ years of experience in product security, application security, secure software development, or a related cybersecurity engineering discipline.

Responsibilities

• Serve as the product security steward for assigned product lines, embedding Secure by Design requirements into the product development lifecycle from concept through end-of-support.
• Define and document security requirements, design inputs, and acceptance criteria with product owners, systems engineers, and R&D.
• Coordinate penetration testing and security verification activities with internal teams and third-party assessors; triage findings, assess exploitability and patient safety impact, and track remediation to closure.
• Prepare and review cybersecurity documentation for regulatory submissions, aligned to FDA premarket cybersecurity guidance, EU MDR, and applicable international requirements.
• Develop and maintain customer-facing security artifacts, including MDS2 forms, security white papers, and responses to hospital and health system security assessments.

Skills

Product security

Threat modeling

Secure by design

SBOMs

Vulnerability management

CI/CD security

Education

Bachelor's degree in Computer Science, Cybersecurity, Software/Biomedical/Electrical Engineering, Information Systems, or a related technical discipline

Master's degree in Cybersecurity, Computer Science, or Biomedical Engineering

Tools

SAST

DAST

SCA

SBOM formats SPDX/CycloneDX

Job description

Johnson & Johnson is seeking a Professional, Quality Steward for DePuy Synthes to embed Secure by Design in the full product lifecycle across medical devices and connected products. You will partner with R&D, Product Management, Engineering, and Regulatory to ensure security requirements are defined early and sustained through postmarket monitoring.

The role requires 4+ years in product security, familiarity with SBOMs, threat modeling, and cybersecurity testing tools.