Senior Product Security Engineer – MedTech Heart Recovery

Johnson & Johnson; California (MO); Hybrid; USD 150,000 - 210,000; Full time

Job summary

Johnson & Johnson’s MedTech cybersecurity team seeks a Principal Product Security Engineer for the Heart Recovery portfolio, located in Danvers, MA. This role centers on securing products through the lifecycle, with responsibilities spanning architecture, threat modeling, and post‑market support.

You will lead Secure Development Lifecycle practices, implement hardware security measures, and ensure regulatory compliance across FDA, NIST, and IEC standards, enhancing patient safety and device

Qualifications

• Bachelor’s degree or equivalent required.
• 10+ years in information security.
• 8+ years embedded/medical device cybersecurity experience.
• Ability to write technical security requirements for embedded systems.

Responsibilities

• Lead Secure Development Lifecycle practices across Heart Recovery devices.
• Define hardware security architectures (HRoT, secure MCU protections).
• Enforce cryptographic protocols for data at rest/in transit and regulatory compliance (FDA, NIST, IEC).
• Coordinate third‑party penetration testing and vulnerability assessments.
• Oversee secure OTA updates, code signing, and supply chain integrity.

Skills

Security architecture

Threat modeling

Secure Development Lifecycle

Regulatory compliance

Embedded security

Risk assessments

Penetration testing coordination

Cloud security

SBOMs

Education

Bachelor's degree

Tools

Threat modeling tools

Job description

Johnson & Johnson’s MedTech cybersecurity team seeks a Principal Product Security Engineer for the Heart Recovery portfolio, located in Danvers, MA. This role centers on securing products through the lifecycle, with responsibilities spanning architecture, threat modeling, and post‑market support.

You will lead Secure Development Lifecycle practices, implement hardware security measures, and ensure regulatory compliance across FDA, NIST, and IEC standards, enhancing patient safety and device