Senior Penetration Testing Program Lead

6090-Johnson & Johnson Services Inc. Legal Entity; New Brunswick (NJ); On-site; USD 94,000 - 170,000; Full time

Job summary

Johnson & Johnson in New Brunswick, NJ, is recruiting for a Professional, Program Lead, Penetration Testing Services to build and run a comprehensive testing program across medical devices, embedded systems, mobile apps, APIs, and cloud services.

The role manages internal testers and external partners, defines methodology, and drives remediation with R&D and engineering teams to ensure patient safety and business risk are mitigated throughout the lifecycle.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Software/Electrical/Biomedical Engineering, Information Systems, or a related technical discipline.
• Advanced degree or specialized cybersecurity education (preferred).

Responsibilities

• Own the end‑to‑end penetration testing services program for products and connected platforms, including roadmap and capacity planning.
• Define and maintain the testing methodology, scoping standards, rules of engagement, and reporting templates.
• Embed security testing gates into the product development lifecycle to ensure secure by design verification.
• Execute and oversee hands‑on assessments across medical devices, firmware, mobile apps, APIs, and cloud infrastructure.
• Manage third‑party penetration testing vendors and quality review of deliverables.

Skills

Penetration testing

Offensive security

Red teaming

Vendor management

Threat modeling

Cloud security

CI/CD security

Python scripting

Education

Bachelor's degree in CS/Engineering

Advanced cybersecurity degree preferred

Tools

Burp Suite

Metasploit

Nmap

Wireshark

Ghidra/IDA

Kali

Job description

Johnson & Johnson in New Brunswick, NJ, is recruiting for a Professional, Program Lead, Penetration Testing Services to build and run a comprehensive testing program across medical devices, embedded systems, mobile apps, APIs, and cloud services.

The role manages internal testers and external partners, defines methodology, and drives remediation with R&D and engineering teams to ensure patient safety and business risk are mitigated throughout the lifecycle.