Security Product Analyst — MedTech

Antler Co; Warsaw (IN); On-site; USD 79,000 - 142,000; Full time

Job summary

Johnson & Johnson is seeking an experienced Exp, Analyst, Security Engineer Product to protect DePuy Synthes digital products across the lifecycle. You will work with engineering, quality, regulatory, and IT teams to design secure solutions and meet cybersecurity and regulatory expectations.

This role offers collaboration with cross‑functional teams in a highly regulated environment, involving security testing and risk assessments; travel up to 10% may be required.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Security, or a related technical field.
• Master’s degree in Cybersecurity, Computer Engineering, or a related discipline.
• 2–4 years of relevant professional experience in cybersecurity, product security, or secure software development.
• Working knowledge of secure development lifecycle (SDLC) practices and security‑by‑design principles.
• Experience conducting security risk assessments, threat modeling, or vulnerability analysis.
• Familiarity with common security standards and frameworks (e.g., ISO, NIST, OWASP).
• Ability to collaborate effectively with cross‑functional technical and non‑technical teams.
• Strong analytical, documentation, and communication skills.

Responsibilities

• Integrate security requirements and controls into the design and development of digital and connected products.
• Perform product security risk assessments, threat modeling, and vulnerability analysis across the product lifecycle.
• Partner with product development, quality, and regulatory teams to support secure design reviews and remediation activities.
• Support security testing activities, including static and dynamic analysis, penetration testing coordination, and vulnerability validation.
• Track, document, and manage product security findings to closure in alignment with internal governance processes.
• Contribute to the development and maintenance of product security standards, procedures, and best practices.
• Monitor emerging cybersecurity threats, vulnerabilities, and regulatory guidance relevant to medical devices and digital health.
• Support audits, assessments, and regulatory inquiries related to product cybersecurity.

Skills

Security engineering

Cybersecurity

Threat modeling

Vulnerability analysis

Cross-functional collaboration

Education

Bachelor’s degree in CS/Engineering

Master’s degree in Cybersecurity/Engineering

Tools

SAST

DAST

Dependency scanning

Cloud security

Job description

Johnson & Johnson is seeking an experienced Exp, Analyst, Security Engineer Product to protect DePuy Synthes digital products across the lifecycle. You will work with engineering, quality, regulatory, and IT teams to design secure solutions and meet cybersecurity and regulatory expectations.

This role offers collaboration with cross‑functional teams in a highly regulated environment, involving security testing and risk assessments; travel up to 10% may be required.