Product Security Steward, Secure by Design

Johnson & Johnson Co.; New Brunswick (NJ); Hybrid; USD 79,000 - 142,000; Full time

Job summary

Johnson & Johnson is recruiting a Professional, Quality Steward for DePuy Synthes in New Brunswick, NJ or West Chester, PA or Palm Beach Gardens, FL or Warsaw, IN or Raynham, MA. The role embeds Secure by Design across the product lifecycle and partners with R&D, Product Management, Engineering, Regulatory and Quality to ensure security requirements are defined early and verified through testing.

The position involves threat modeling, SBOM management, regulatory documentation, and coordination

Qualifications

• 4+ years in product security or cybersecurity engineering.
• Experience applying Secure by Design across a product lifecycle.
• Threat modeling experience for embedded, mobile, or connected systems.
• Familiarity with SBOM formats and risk management.
• Strong written and verbal communication.

Responsibilities

• Serve as the product security steward for assigned product lines, embedding Secure by Design requirements into the product development lifecycle from concept through end-of-support.
• Define and document security requirements, design inputs, and acceptance criteria with product owners, systems engineers, and R&D teams.
• Facilitate threat modeling and security architecture reviews for connected devices, embedded software, mobile apps, and cloud services; ensure identified threats are mitigated.
• Conduct and coordinate product security risk assessments aligned to standards (ISO 14971, AAMI TIR57).
• Generate, validate, and maintain SBOMs; monitor third‑party components for vulnerabilities and drive remediation.
• Support secure software development practices, including static and dynamic analysis and CI/CD security gates.
• Coordinate penetration testing and remediation tracking with internal teams and external assessors.
• Prepare cybersecurity documentation for regulatory submissions with FDA/EU guidance.
• Operate post‑market vulnerability management and coordinate disclosure with customers.
• Develop and maintain customer‑facing security artifacts and responses to security assessments.
• Collaborate with Quality and Regulatory to capture security activities in design history files and QMS.

Skills

Product security

Threat modeling

Secure coding

Vulnerability management

SBOM management

Education

Bachelor's degree in Computer Science or related

Master's degree in Cybersecurity or related

Tools

SAST

DAST

SBOM formats

Job description

Johnson & Johnson is recruiting a Professional, Quality Steward for DePuy Synthes in New Brunswick, NJ or West Chester, PA or Palm Beach Gardens, FL or Warsaw, IN or Raynham, MA. The role embeds Secure by Design across the product lifecycle and partners with R&D, Product Management, Engineering, Regulatory and Quality to ensure security requirements are defined early and verified through testing.

The position involves threat modeling, SBOM management, regulatory documentation, and coordination