Security Engineer, Product

Johnson & Johnson

. Integrate security requirements and controls into the design and development of digital and connected products .

Posted 10/16/2026full-timeUnited StatesJuniorMid-Level💰 $79,000 - $127,650 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in integrating security requirements into product design and development, conducting security risk assessments, and collaborating with cross-functional teams. Proficient in secure development lifecycle practices and familiar with regulatory standards relevant to medical devices.

Highest-signal resume keywords

Security Risk AssessmentThreat ModelingVulnerability AnalysisSecure Development Lifecycle (SDLC)ISO, NIST, OWASP Standards

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Risk AssessmentThreat ModelingVulnerability AnalysisSecure Development Lifecycle (SDLC)Static AnalysisDynamic AnalysisPenetration TestingDependency ScanningDocumentationAnalytical Skills

Soft Skills

CollaborationCommunication SkillsAnalytical Skills

Tools & Technologies

SASTDASTCloud SecurityEmbedded Device SecurityConnected Device Security

Certifications & Qualifications

CISSPCSSLPGSEC

Industry Keywords

Medical DevicesHealthcareLife SciencesRegulatory ComplianceCybersecurity

Tech Stack

Tools & technologies

CloudCyber SecuritySDLC

About the role

Key responsibilities & impact

Integrate security requirements and controls into the design and development of digital and connected products
Perform product security risk assessments, threat modeling, and vulnerability analysis across the product lifecycle
Partner with product development, quality, and regulatory teams on secure design reviews and remediation
Support security testing, including static and dynamic analysis, penetration testing coordination, and vulnerability validation
Track, document, and manage product security findings to closure through internal governance processes
Develop and maintain product security standards, procedures, and best practices
Monitor emerging cybersecurity threats, vulnerabilities, and regulatory guidance relevant to medical devices and digital health
Support audits, assessments, and regulatory inquiries related to product cybersecurity
Report into the DePuy Synthes Technology organization

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Engineering, Information Security, or a related technical field
2–4 years of relevant professional experience in cybersecurity, product security, or secure software development
Working knowledge of secure development lifecycle (SDLC) practices and security-by-design principles
Experience conducting security risk assessments, threat modeling, or vulnerability analysis
Familiarity with common security standards and frameworks, including ISO, NIST, and OWASP
Ability to collaborate with cross-functional technical and non-technical teams
Strong analytical, documentation, and communication skills
English proficiency required
Up to 10% domestic travel
Preferred: experience in a regulated industry such as medical devices, healthcare, or life sciences
Preferred: hands-on exposure to SAST, DAST, and dependency scanning
Preferred: knowledge of cloud, embedded, or connected device security concepts
Preferred: understanding of FDA premarket/postmarket guidance
Preferred: experience contributing to security policies, standards, or governance processes
Preferred certifications: CISSP, CSSLP, GSEC, or equivalent security certification

Benefits

Comp & perks

Consolidated retirement plan (pension)
Savings plan (401(k))
Eligibility for the Company’s long-term incentive program
Vacation – 120 hours per calendar year
Sick time – 40 hours per calendar year
Holiday pay, including Floating Holidays – 13 days per calendar year
Work, Personal and Family Time – up to 40 hours per calendar year
Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child
Bereavement Leave – 240 hours for an immediate family member; 40 hours for an extended family member per calendar year
Caregiver Leave – 80 hours in a 52-week rolling period
Volunteer Leave – 32 hours per calendar year
Military Spouse Time-Off – 80 hours per calendar year
Equal opportunity and inclusive interview/accommodation support