Product Security Steward: Secure by Design Leader

6090-Johnson & Johnson Services Inc. Legal Entity; New Brunswick (NJ); On-site; USD 79,000 - 142,000; Full time

Benefits offered by this job

Vacation time

Parental Leave

Volunteer Leave

Job summary

Johnson & Johnson is seeking a Professional, Quality Steward in the Cybersecurity function across DePuy Synthes product lines. The role embeds Secure by Design into the development lifecycle from concept through end-of-support, working with R&D, Product Management, Engineering, Regulatory Affairs and Quality.

The ideal candidate has 4+ years in product security, strong threat modeling skills, and experience with SBOMs and regulatory cybersecurity submissions. Travel up to 10% may be required.

Qualifications

• 4+ years in product security, application security, or related cybersecurity engineering discipline.
• Experience applying Secure by Design across a product development lifecycle.
• Familiarity with SBOM generation formats and vulnerability management.

Responsibilities

• Embed Secure by Design into the development lifecycle from concept through end-of-support.
• Define security requirements, design inputs, and acceptance criteria with product owners and R&D.
• Facilitate threat modeling and security architecture reviews for connected devices and cloud services.
• Coordinate vulnerability management, SBOMs, third-party components, and remediation planning.
• Prepare cybersecurity documentation for regulatory submissions and regulatory inquiries.

Skills

Threat modeling

Secure by Design

SBOM

Vulnerability management

Regulatory submissions

CI/CD security

SAST/DAST/SCA

Cloud security

Embedded security

Communication

Education

Bachelor's degree in Computer Science, Cybersecurity, Software/Biomedical/ Electrical Engineering, Information Systems

Master's degree in Cybersecurity, Computer Science, or Biomedical Engineering

Tools

Threat modeling methodologies (STRIDE)

Secure coding practices

SBOM formats (SPDX, CycloneDX)

Vulnerability management tooling

CI/CD security tooling

Job description

Johnson & Johnson is seeking a Professional, Quality Steward in the Cybersecurity function across DePuy Synthes product lines. The role embeds Secure by Design into the development lifecycle from concept through end-of-support, working with R&D, Product Management, Engineering, Regulatory Affairs and Quality.

The ideal candidate has 4+ years in product security, strong threat modeling skills, and experience with SBOMs and regulatory cybersecurity submissions. Travel up to 10% may be required.