Johnson & Johnson

Exp, Analyst, Security Engineer Product

Johnson & Johnson$79K — $142K *
Healthcare
Less than 5 years of experience
Job Overview by Ladders

Qualifications

  • Bachelor's degree in Computer Science, Engineering, Information Security, or a related technical field required.
  • 2-4 years of experience in cybersecurity, product security, or secure software development required.
  • Working knowledge of secure development lifecycle (SDLC) practices and security-by-design principles required.
  • Experience conducting security risk assessments, threat modeling, or vulnerability analysis required.
  • Familiarity with security standards and frameworks (e.g., ISO, NIST, OWASP) required.
  • Strong analytical, documentation, and communication skills required.

Responsibilities

  • Integrate security requirements and controls into product design and development.
  • Perform security risk assessments, threat modeling, and vulnerability analysis.
  • Collaborate with cross-functional teams for secure design reviews and remediation activities.
  • Support security testing, including penetration testing coordination.
  • Document and manage product security findings according to governance processes.
  • Contribute to the development of product security standards and best practices.
  • Monitor emerging cybersecurity threats and regulatory guidance relevant to medical devices.

Benefits

  • Retirement plan (pension) and savings plan (401(k)).
  • 120 hours of vacation per calendar year.
  • Up to 40 hours of work, personal, and family time.
  • Parental leave of up to 480 hours within one year of a child's arrival.
  • 240 hours of bereavement leave for immediate family members.
  • Volunteer leave of 32 hours per calendar year.
Full Job Description
Job Function:
Technology Product & Platform Management

Job Sub Function:
Technical Product Management

Job Category:
Scientific/Technology

All Job Posting Locations:
New Brunswick, New Jersey, United States of America, Palm Beach Gardens, Florida, United States of America, Raynham, Massachusetts, United States of America, Warsaw, Indiana, United States of America, West Chester, Pennsylvania, United States of America

Job Description:

DePuy Synthes is recruiting for a(n) Exp, Analyst, Security Engineer Product located in New Brunswick, NJ or West Chester, PA or Palm Beach Gardens, FL or Warsaw, IN or Raynham, MA.

Job Overview

This role supports the protection of DePuy Synthes digital products and connected medical technologies by embedding security practices throughout the product lifecycle. The Exp, Analyst, Security Engineer Product partners closely with engineering, quality, regulatory, and IT teams to identify risks early, design secure solutions, and ensure products meet cybersecurity and regulatory expectations. This is an exciting opportunity to directly impact patient safety and product trust while working in a highly regulated, innovation-driven environment and reports into the DePuy Synthes Technology organization.

Key Responsibilities

  • Integrate security requirements and controls into the design and development of digital and connected products.


  • Perform product security risk assessments, threat modeling, and vulnerability analysis across the product lifecycle.


  • Partner with product development, quality, and regulatory teams to support secure design reviews and remediation activities.


  • Support security testing activities, including static and dynamic analysis, penetration testing coordination, and vulnerability validation.


  • Track, document, and manage product security findings to closure in alignment with internal governance processes.


  • Contribute to the development and maintenance of product security standards, procedures, and best practices.


  • Monitor emerging cybersecurity threats, vulnerabilities, and regulatory guidance relevant to medical devices and digital health.


  • Support audits, assessments, and regulatory inquiries related to product cybersecurity.


Qualifications

Education

  • Required: Bachelor's degree in Computer Science, Engineering, Information Security, or a related technical field.


  • Preferred: Master's degree in Cybersecurity, Computer Engineering, or a related discipline.


Experience and Skills

Required:

  • 2-4 years of relevant professional experience in cybersecurity, product security, or secure software development.


  • Working knowledge of secure development lifecycle (SDLC) practices and security-by-design principles.


  • Experience conducting security risk assessments, threat modeling, or vulnerability analysis.


  • Familiarity with common security standards and frameworks (e.g., ISO, NIST, OWASP).


  • Ability to collaborate effectively with cross-functional technical and non-technical teams.


  • Strong analytical, documentation, and communication skills.


Preferred:

  • Experience supporting cybersecurity activities in a regulated industry (medical devices, healthcare, or life sciences).


  • Hands-on exposure to security testing tools and techniques (e.g., SAST, DAST, dependency scanning).


  • Knowledge of cloud, embedded, or connected device security concepts.


  • Understanding of regulatory cybersecurity expectations (e.g., FDA premarket/postmarket guidance).


  • Experience contributing to internal security policies, standards, or governance processes.


Other:

  • Language: English proficiency required.


  • Travel: Up to 10% domestic travel.


  • Certifications (Preferred): CISSP, CSSLP, GSEC, or equivalent security certification.


For more information on how we support the whole health of our employees throughout their wellness, career and life journey, please visit www.careers.jnj.com.

Johnson & Johnson announced plans to separate our Orthopaedics business to establish a standalone orthopaedics company, operating as DePuy Synthes. The process of the planned separation is anticipated to be completed within 18 to 24 months, subject to legal requirements, including consultation with works councils and other employee representative bodies, as may be required, regulatory approvals and other customary conditions and approvals. Should you accept this position, it is anticipated that, following conclusion of the transaction, you would be an employee of DePuy Synthes and your employment would be governed by DePuy Synthes employment processes, programs, policies, and benefit plans. In that case, details of any planned changes would be provided to you by DePuy Synthes at an appropriate time and subject to any necessary consultation processes.

Required Skills:

Preferred Skills:
Analytical Reasoning, Coaching, Communication, Cross-Functional Collaboration, Demand Forecasting, Human-Computer Interaction (HCI), Persistence and Tenacity, Product Costing, Product Development, Product Strategies, Quality Assurance (QA), Research and Development, Researching, Software Development Management, Technical Credibility, Technologically Savvy

The anticipated base pay range for this position is :
79,000.00 - 142,000.00 USD Annual

Additional Description for Pay Transparency:
Subject to the terms of their respective plans, employees are eligible to participate in the Company's consolidated retirement plan (pension) and savings plan (401(k)). Subject to the terms of their respective policies and date of hire, employees are eligible for the following time off benefits: • Vacation -120 hours per calendar year • Sick time - 40 hours per calendar year; for employees who reside in the State of Colorado -48 hours per calendar year; for employees who reside in the State of Washington -56 hours per calendar year • Holiday pay, including Floating Holidays -13 days per calendar year • Work, Personal and Family Time - up to 40 hours per calendar year • Parental Leave - 480 hours within one year of the birth/adoption/foster care of a child • Bereavement Leave - 240 hours for an immediate family member: 40 hours for an extended family member per calendar year • Caregiver Leave - 80 hours in a 52-week rolling period10 days • Volunteer Leave - 32 hours per calendar year • Military Spouse Time-Off - 80 hours per calendar year For additional general information on Company benefits, please go to: - https://www.careers.jnj.com/employee-benefits

About Johnson & Johnson

Scio Diamond creates single-crystal Type IIa diamonds for the jewelry market and for industrial applications. It employs a patent-protected chemical vapor deposition (CVD) process in a precisely controlled laboratory setting to produce diamonds. It was founded in 2009 and is headquartered in Greenville, South Carolina.

Johnson & Johnson Careers

Joining Johnson & Johnson provides an unparalleled opportunity to be a part of a global team of professionals dedicated to blending care, science, and innovation to profoundly change the trajectory of health for humanity.

Work You’ll Do

At Johnson & Johnson, you will engage in work that matters. Join our community of professionals in health care to drive significant and impactful changes across the globe. Our team at Johnson & Johnson leads with science and heart in sectors from pharmaceuticals to medical devices and consumer health products.

Transform Health Care

Leverage Johnson & Johnson’s culture of innovation to transform health care and improve the lives of people around the world. Our collaborative environment encourages leadership and growth, allowing you to pioneer new strategies for health care solutions with a diverse team of experts.

Innovative Work

Engage in groundbreaking work that enhances how care is delivered on a global scale. Johnson & Johnson’s commitment to innovative health solutions results in dynamic career paths filled with opportunities for professional growth and development.

Be Part of a Great Team

Our team at Johnson & Johnson thrives on collaboration and diversity. You will work alongside over 130,000 employees globally who are committed to making a lasting impact. With a culture that values diversity training and leadership, you are supported in both personal and professional growth.

Future-Proof Your Career

Johnson & Johnson offers a myriad of job opportunities and employment benefits designed to help you meet your career and personal goals. Our employees enjoy comprehensive benefits, including health insurance, retirement plans, and family-friendly policies that pave the way for a fulfilling career and life balance.

Explore Job Opportunities and Internships

Whether you’re looking to start your career or take it to the next level, Johnson & Johnson offers positions ranging from internships to leadership roles across various sectors. Enhance your skills through hands-on experience and our extensive networking and mentorship programs.

Johnson & Johnson Leadership and Development

Our commitment to leadership and continuous learning is at the core of our employment philosophy. Every position offers chances to lead, learn, and innovate. We provide extensive training programs and development courses that prepare you for the future of health care.

Stay Connected

Join Our Team

Search open positions that match your skills and interests. We are constantly hiring and looking for curious, driven, and compassionate team players.

SEARCH JOHNSON & JOHNSON JOBS

Keep Up to Date

Stay informed with career tips, insider perspectives, and industry-leading insights you can put to use today—all from the people who work here.

READ CAREERS BLOG

Job Alert Emails

Customize your subscription to receive job alerts, latest news, and insider tips tailored to your preferences. Discover the exciting and rewarding career opportunities that await at Johnson & Johnson. Join Johnson & Johnson today to be a part of a team that values innovation, leadership, and diversity, and see how far your ambition can take you.
Learn more about Johnson & Johnson
Size
141,700 employees
Market Cap
$462.7 billion
Industry
Net Income
$14.7 billion
Founded
1886
5 Year Trend
+5.5%
Revenue
$82.5 billion
NASDAQ

Similar Jobs

More Jobs at Johnson & Johnson

More Healthcare Jobs

Find similar Exp, Analyst, Security Engineer Product jobs: