Senior Engineer, Product Risk Management

Johnson & Johnson MedTech; Irvine (CA); On-site; USD 77,000 - 125,000; Full time

Job summary

A leading company in healthcare innovation is seeking a Senior Engineer for Product Risk Management in Irvine or Milpitas, CA. This role focuses on vulnerability management and risk assessment to ensure the security of Vision products. The ideal candidate will have a strong background in information security, with experience in implementing vulnerability management programs and a solid understanding of security best practices. The position offers competitive compensation and additional benefits.

Benefits

Performance bonuses

Healthcare

Retirement plans

Paid time off

Qualifications

• 5+ years in information security focusing on vulnerability management.
• Understanding of network protocols, OS, and vulnerabilities.

Responsibilities

• Implement and maintain a comprehensive vulnerability management program.
• Conduct routine security checks, including vulnerability scanning and penetration testing.
• Perform thorough risk assessments to identify vulnerabilities and threats.

Skills

Analytical

Problem-solving

Communication

Attention to detail

Education

Bachelor's degree in Engineering

Bachelor's degree in Science

Tools

Python

Java

Job description

Join to apply for the Senior Engineer, Product Risk Management role at Johnson & Johnson MedTech.

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at https://www.jnj.com.

Job Function

Supply Chain Engineering

Job Sub Function

Quality Engineering

Job Category

Scientific/Technology

All Job Posting Locations:

Irvine, California, United States of America, Milpitas, California, United States of America

Job Description

Johnson & Johnson Surgical Vision Inc., a member of the Johnson & Johnson family of companies, is recruiting for a Senior Engineer, Product Risk Management, located in Irvine or Milpitas, California.

In this role, you will be part of the Johnson & Johnson Vision Lifecycle Management and New Product Introduction Quality Engineering team. The focus will be on vulnerability management, assessment, and risk management to ensure the security and integrity of our systems and data for Vision products excluding Contract lenses and CEH (Consumer Eye Health) solutions.

Key Responsibilities

1. Vulnerability Management
   • Implement and maintain a comprehensive vulnerability management program
   • Conduct routine security checks, including vulnerability scanning and penetration testing
   • Develop and refine incident response plans to address potential security breaches
   • Communicate business-related issues or opportunities to management
2. Risk Assessment and Management
   • Perform thorough risk assessments to identify vulnerabilities and threats
   • Prioritize assets based on risk level and importance
   • Implement a risk-based approach to vulnerability management
   • Ensure compliance and uniformity of risk assessments on new products
3. Security Controls and Remediation
   • Design and implement security controls
   • Lead remediation efforts for high-risk vulnerabilities
   • Develop and integrate security tooling
4. Reporting and Analysis
   • Generate analytics and reports for stakeholders
   • Evaluate effectiveness of security measures
   • Analyze security metrics and recommend improvements
   • Maintain dashboards and provide regular updates to management

Qualifications

Education:

• Bachelor's degree or equivalent in Engineering, Science, or related field
• 5+ years in information security focusing on vulnerability management
• Understanding of network protocols, OS, and vulnerabilities
• Proficiency with assessment tools and CVSS scoring

Experience and Skills:

• Knowledge of security best practices and standards
• Analytical, problem-solving, and communication skills
• Programming skills (Python, Java)
• Experience with cloud security, containerization, and compliance frameworks
• Proven ability to implement vulnerability management programs
• Attention to detail, teamwork, and familiarity with medical device regulations

Preferred: Presentation skills, project management, process mapping

This position may be located in Irvine or Milpitas, CA, with up to 25% travel. Compensation ranges are $77,000-$124,200 in Irvine and $89,000-$142,600 in Milpitas. Additional benefits include performance bonuses, healthcare, retirement plans, and paid time off.