Senior Cloud Security Engineer

Johnson & Johnson; Denver (CO); On-site; USD 100,000 - 173,000; Full time

Job summary

A leading healthcare company is seeking a Senior Cloud Security Engineer to join their MedTech Product Security team. This role entails driving security practices across the product lifecycle, collaborating closely with engineering teams, and ensuring compliance with industry standards. Ideal candidates will have significant experience in information security and a passion for improving patient outcomes through secure product development.

Qualifications

• 5+ years of industry experience in Information Security.
• Experience in Cloud Scrum/Agile Azure DevOps environment.
• Strong communication and interpersonal skills.

Responsibilities

• Partner with engineering teams to ensure adherence to security policies.
• Deliver documentation for pre-market product development activities.
• Perform security risk assessment on Cloud infrastructure.

Skills

Information Security

Cloud Computing

Risk Management

Agile development

Cyber Security

Communication

Education

Bachelor’s degree

Tools

Snyk

Veracode

JIRA

Confluence

Docker

Kubernetes

Job description

Join to apply for the Senior Cloud Security Engineer role at Johnson & Johnson

1 day ago Be among the first 25 applicants

Join to apply for the Senior Cloud Security Engineer role at Johnson & Johnson

At Johnson & Johnson,we believe health is everything. Our strength in healthcare innovation empowers us to build aworld where complex diseases are prevented, treated, and cured,where treatments are smarter and less invasive, andsolutions are personal.Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity.Learn more at https://www.jnj.com

Job Function

Technology Enterprise Strategy & Security

Job Sub Function

Solution Architecture

Job Category

Scientific/Technology

All Job Posting Locations:

Albuquerque, New Mexico, United States of America, Albuquerque, New Mexico, United States of America, Atlanta, Georgia, United States, Austin, Texas, United States, Baltimore, Maryland, United States, Billings, Montana, United States, Birmingham, Alabama, United States, Boise, Idaho, United States, Burlington, Vermont, United States, Charleston, West Virginia, United States, Charlotte, North Carolina, United States, Chicago, Illinois, United States, Columbia, Maryland, United States, Columbus, Ohio, United States, Concord, New Hampshire, United States, Danvers, Massachusetts, United States of America, Denver, Colorado, United States, Des Moines, Iowa, United States, Detroit, Michigan, United States, Dover, Delaware, United States, Fargo, North Dakota, United States, Hartford, Connecticut, United States, Indianapolis, Indiana, United States, Irvine, California, United States of America, Jackson, Mississippi, United States {+ 22 more}

Job Description

We are seeking the best talent for a Senior Cloud Security Engineer to join our MedTech Product Security team. The role can be based in Raritan, NJ or Danvers, MA. Remote work options may be considered on a case-by-case basis and if approved by the Company.

Are you passionate about security and interested in joining a community of collaborative colleagues working in a Patient First! culture? If that’s you, we have an immediate opportunity for a Senior Cloud Security Engineer to join the newly formed Product Security team to help ensure security is implemented by design for this top-performing medical device company. This is an exciting opportunity to impact development initiatives that will shape future product development and industry standards. You will own the Product Security process that includes both pre-market and post-market processes engineering teams leverage throughout the product development lifecycle. If you are eager to leverage your security risk and compliance skills to make a difference and directly impact patient lives, this could be perfect for you.

Primary Duties And Responsibilities

• Being at the office in Danvers MA for a minimum of 3 days per week (for candidates within commutable distance to site).
• Partner with engineering teams (cloud, console) to drive successful adherence to Abiomed’s product security policies, processes, program objectives.
• Create, update, and improve product security processes.
• Act as an SME on cyber security matters and provide guidance to development teams.
• Advocate for proactive inclusion of cyber security input into all phases of the product life cycle, process improvements, strategic product road map planning.
• Deliver documentation for pre-market product development activities including security plans, threat models, security requirements, SBOM, and risk management documentation.
• Drive and monitor post-market vulnerability management activities, with adherence to strict timelines.
• Perform security risk assessment on Cloud infrastructure and applications.
• Collaborate with the development team to integrate security measures into the CI/CD pipeline and the DevSecOps processes.
• Continuous improvement of Defender Score.
• Support compliance certification activities, such as SOC2, FedRAMP, ISO 27001, etc.
• Identify, research, evaluate, and integrate new compliance requirements, industry standards, and best practices into the product security programs.
• Maintain relationships with Abiomed’s Information Sharing and Analysis Organizations.
• Guide teams to make decisions that balance business needs with medical device security objectives.
• Work across organizational boundaries and exhibit empathy with customers, both internal and external.
• Perform other related duties and responsibilities, as assigned.
  
  

Qualifications

Required:

• Bachelor’s degree
• 5+ years industry experience in Information Security.
• Experience working in a Cloud Scrum/Agile Azure DevOps environment.
• Familiarity with some or all of these tools: Snyk, Veracode, Wiz, JIRA, Confluence.
• Experience with Containerization technologies such as Docker and Kubernetes.
• Working knowledge of regulatory standards and compliance frameworks (e.g., NIST Cybersecurity Framework, ISO27001, SOC2, HIPAA, GDPR).
• Experience with security risk management techniques.
• Demonstrated organizational skills, attention to detail, the ability to handle multiple assignments simultaneously in a timely manner and be able to meet assigned deadlines.
• Committed to working with a sense of urgency and embracing new challenges.
• Strong communication and interpersonal skills.
  
  

Preferred

• Experience working in an FDA-regulated environment.
  
  

Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.

Johnson and Johnson is committed to providing an interview process that is inclusive of our applicants’ needs. If you are an individual with a disability and would like to request an accommodation, please email the Employee Health Support Center ([e-mail]) or contact AskGS to be directed to your accommodation resource.

#JNJTECH

The anticipated base pay range for this position is :

$100,000 - $172,500

Additional Description For Pay Transparency

The Company maintains highly competitive, performance-based compensation programs. Under current guidelines, this position is eligible for an annual performance bonus in accordance with the terms of the applicable plan. The annual performance bonus is a cash bonus intended to provide an incentive to achieve annual targeted results by rewarding for individual and the corporation’s performance over a calendar/performance year. Bonuses are awarded at the Company’s discretion on an individual basis. Employees and/or eligible dependents may be eligible to participate in the following Company sponsored employee benefit programs: medical, dental, vision, life insurance, short- and long-term disability, business accident insurance, and group legal insurance. Employees may be eligible to participate in the Company’s consolidated retirement plan (pension) and savings plan (401(k)). Employees are eligible for the following time off benefits: Vacation – up to 120 hours per calendar year Sick time - up to 40 hours per calendar year; for employees who reside in the State of Washington – up to 56 hours per calendar year Holiday pay, including Floating Holidays – up to 13 days per calendar year of Work, Personal and Family Time - up to 40 hours per calendar year Additional information can be found through the link below. http://www.careers.jnj.com/employee-benefits The compensation and benefits information set forth in this posting applies to candidates hired in the United States. Candidates hired outside the United States will be eligible for compensation and benefits in accordance with their local market.

Seniority level

• Seniority level

  Not Applicable

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  Hospitals and Health Care

Referrals increase your chances of interviewing at Johnson & Johnson by 2x

Get notified about new Senior Security Engineer jobs in Denver, CO.

Boulder, CO $128,700.00-$231,700.00 1 week ago

Denver, CO $114,000.00-$159,000.00 4 days ago

Enterprise Security Advisor/Architect - Data Security

Associate Director, Cloud Security Architect

Associate Director, Cloud Security Architect

Solution Architect, Security Access Service Edge (West)

Denver, CO $154,000.00-$200,000.00 6 days ago

Senior Lead III, Security Architect (Hybrid or Virtual)

BCG Platinion | Lead IT Architect, Public Sector Industry Leader (Defense & Security, Civil Sector)

BCG Platinion | Principal IT Architect, Public Sector Industry Leader (Defense & Security, Civil Sector)

Senior AWS Cloud Consultant (TS/SCI with Poly Required)

Aurora, CO $100,000.00-$200,000.00 7 months ago

Sr Principal Systems Engineer - Technical Subject Matter Expert

Lone Tree, CO $189,761.00-$260,922.00 1 week ago

Denver, CO $115,000.00-$160,000.00 1 day ago

Principal Cybersecurity Engineer - Enterprise Security Architect

Denver, CO $164,900.00-$288,000.00 1 day ago

Boulder, CO $130,500.00-$171,000.00 1 day ago

Boulder, CO $124,000.00-$178,000.00 4 days ago

Principal Cybersecurity Engineer - Enterprise Security Architect

Boulder, CO $164,900.00-$288,000.00 1 day ago

Littleton, CO $72,400.00-$103,400.00 1 day ago

Denver Metropolitan Area $130,000.00-$170,000.00 6 days ago

Littleton, CO $96,250.00-$137,500.00 4 days ago

Greenwood Village, CO $160,000.00-$180,000.00 1 day ago

Denver, CO $140,000.00-$200,000.00 2 weeks ago

Denver, CO $200,000.00-$215,000.00 1 month ago

Boulder, CO $116,000.00-$168,000.00 6 days ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.