Security Product Analyst - Cybersecurity in Medical Devices

Johnson Johnson; New Brunswick (NJ); On-site; USD 90,000 - 135,000; Full time

Job summary

Johnson & Johnson is seeking an Exp, Analyst, Security Engineer Product to safeguard DePuy Synthes digital products and connected medical devices. You will partner with engineering, quality, regulatory, and IT teams to embed security throughout the lifecycle, ensuring cybersecurity and regulatory alignment.

The role requires 2–4 years of relevant experience, knowledge of SDLC security, and familiarity with ISO/NIST/OWASP frameworks. Travel up to 10% domestically may be involved.

Qualifications

• Bachelor's degree in CS, Engineering, or related field.
• 2–4 years in cybersecurity or secure software development.
• Knowledge of SDLC security and risk assessments.

Responsibilities

• Integrate security requirements into design and development of digital products.
• Perform product security risk assessments and threat modeling.
• Support security testing activities including SAST/DAST.
• Track findings and ensure closure per governance.
• Monitor threats and regulatory guidance for medical devices.

Skills

SDLC security

Security-by-design

Risk assessment

Threat modeling

Vulnerability analysis

Security standards

Cross-functional collaboration

Analytical skills

Documentation

Communication

Education

Bachelor's degree in CS/Engineering/InfoSec

Master's degree in Cybersecurity/CS

Tools

SAST

DAST

Dependency scanning

Job description

Johnson & Johnson is seeking an Exp, Analyst, Security Engineer Product to safeguard DePuy Synthes digital products and connected medical devices. You will partner with engineering, quality, regulatory, and IT teams to embed security throughout the lifecycle, ensuring cybersecurity and regulatory alignment.

The role requires 2–4 years of relevant experience, knowledge of SDLC security, and familiarity with ISO/NIST/OWASP frameworks. Travel up to 10% domestically may be involved.