Senior Penetration Testing Program Lead — MedTech Security

Johnson & Johnson MedTech; Town of Florida (NY); On-site; USD 94,000 - 170,000; Full time

Benefits offered by this job

Vacation time

Holiday pay

Parental Leave

Sick time

Job summary

Johnson & Johnson is recruiting a Professional, Program Lead, Penetration Testing Services to manage the pen-testing program across medical devices, firmware, apps, APIs, and cloud services. You will define testing methodology, engage internal and external testers, and translate findings into risk assessments for R&D and product teams.

The role requires 6+ years in security testing, strong vendor management, and experience integrating security into SDLC. Travel up to 10% may be required.

Qualifications

• Bachelor's degree in CS, Cybersecurity, or related field.
• Minimum 6 years in penetration testing or offensive security.
• Experience leading a penetration testing program and vendor oversight.

Responsibilities

• Own end-to-end pen-testing program across products and platforms.
• Define testing methodology, scoping, and engagement rules.
• Coordinate remediation with R&D and engineering teams to closure.

Skills

Penetration testing

Offensive security

Vendor oversight

Python scripting

Burp Suite

Metasploit

Nmap

Wireshark

Ghidra/IDA

Kali Linux

Education

Bachelor's degree in CS/Cybersecurity

Advanced cybersecurity education

Tools

Burp Suite

Metasploit

Nmap

Wireshark

Ghidra/IDA

Kali Linux

Job description

Johnson & Johnson is recruiting a Professional, Program Lead, Penetration Testing Services to manage the pen-testing program across medical devices, firmware, apps, APIs, and cloud services. You will define testing methodology, engage internal and external testers, and translate findings into risk assessments for R&D and product teams.

The role requires 6+ years in security testing, strong vendor management, and experience integrating security into SDLC. Travel up to 10% may be required.