Remote Principal Product Security Engineer Medical Devices

Johnson & Johnson Co.; North Carolina; Ibrido; USD 102.000 - 177.000; Tempo pieno

Vantaggi offerti da questo lavoro

Vacation 120 hours per calendar year

Sick time 40 hours per calendar year (

Holiday pay 13 days per calendar year

Descrizione del lavoro

Johnson & Johnson is seeking a Principal Product Security Engineer to join the MedTech cybersecurity team in Danvers, MA. This role will lead security architecture, threat modelling, and post-market security programs for Heart Recovery devices, including Impella platforms.

You will partner with R&D and regulatory teams to implement secure-by-design practices and ensure compliance with FDA and industry standards.

Competenze

• Bachelor's degree or equivalent required.
• Strong knowledge of security requirements for embedded systems and medical devices.
• Experience with threat modeling and regulatory security submissions.
• Knowledge of FDA cybersecurity guidance, NIST 800-53, ISO/IEC 27001.
• Experience with third-party penetration testing and vulnerability assessment.

Mansioni

• Define and implement secure boot, firmware integrity validation, and anti-tamper mechanisms.
• Manage cryptographic data protection for data at rest and in transit.
• Lead Secure Development Lifecycle practices across Heart Recovery products.
• Coordinate third-party penetration testing and vulnerability remediation.
• Respond to customer security questionnaires and review contractual language as needed.

Conoscenze

Information security

Embedded systems security

Threat modeling

Regulatory compliance

Risk assessment

Security architecture

Secure SDLC

Cryptography

Formazione

Bachelor's degree or equivalent

Strumenti

QNX

Yocto

Linux

Descrizione del lavoro

Johnson & Johnson is seeking a Principal Product Security Engineer to join the MedTech cybersecurity team in Danvers, MA. This role will lead security architecture, threat modelling, and post-market security programs for Heart Recovery devices, including Impella platforms.

You will partner with R&D and regulatory teams to implement secure-by-design practices and ensure compliance with FDA and industry standards.