Lead Product Security Engineer
AI summary of the role
Lead product security for J&J Heart Recovery's medical device portfolio, owning pre-market and post-market security processes across the total product lifecycle.
No longer in the current catalog. Last included 2026-09-09. Check the employer’s posting for availability.
What you’ll do
- Partner with engineering and cross-functional teams to drive adherence to the product security program.
- Deliver pre-market security documentation including threat models, architecture diagrams, SBOM, and risk documentation.
- Define and implement key management infrastructure (PKI, HSMs, TPMs) for device identity and authentication.
- Monitor and drive post-market vulnerability management activities with strict timeline adherence.
What you’ll bring
- Bachelor’s degree in Computer Science, Information Systems, or related field.
- 4+ years industry experience in Information Security.
- Working knowledge of regulatory standards (NIST Cybersecurity Framework, ISO27001, SOC2, HIPAA, GDPR).
- Experience with security risk management techniques.
Technologies
PKI · HSM · TPM · secure enclave · SBOM · threat modeling · SOC2 · FedRAMP · ISO 27001 · NIST Cybersecurity Framework
About Johnson & Johnson
Develops and commercializes prescription medicines and medtech across oncology, immunology, neuroscience, cardiovascular, surgery, orthopaedics, and vision for patients and health systems worldwide.
Public · 5000+ people
Source and classification
Internal deployment & tooling · Evidence for this classification:
community of collaborative colleagues working in a Patient First! culture If that’s you, heart recovery has an immediate opportunity for a Product Security Analyst to join the newly formed Product Security team to help ensure security is implemented by design for this top-performing medical device company. This is an exciting opportunity to impact development initiatives that will shape future product development and industry standards. You will own the Product Security process that includes both pre-market and post-market processes engineering teams leverage throughout the product development lifecycle. If you are eager to leverage your security risk and compliance skills to make a difference and directly impact patient lives, this could be perfect for you. Primary Duties And Responsibilities: Partner with engineering and other cross-functional teams (cloud, console, pump, etc.) to
More from the job description
At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit. Job Function: Technology Enterprise Strategy & Security Job Sub Function: Solution Architecture Job Category: Scientific/Technology All Job Posting Locations: Danvers, Massachusetts, United States of America, Raritan, New Jersey, United States of America Job Description: J&J Heart Recovery is redefining team-driven success while reshaping heart recovery. Here, new ideas are welcomed and encouraged, learning is constant, and our dynamic setting enables positive people to do profoundly important work. As the solutions we provide to patients and health care providers [... source excerpt omitted ...] or this top-performing medical device company. This is an exciting opportunity to impact development initiatives that will shape future product development and industry standards. You will own the Product Security process that includes both pre-market and post-market processes engineering teams leverage throughout the product development lifecycle. If you are eager to leverage your security risk and compliance skills to make a difference and directly impact patient lives, this could be perfect for you. Primary Duties And Responsibilities: Partner with engineering and other cross-functional teams (cloud, console, pump, etc.) to drive successful adherence to J&J Heart Recovery's [... source excerpt omitted ...] ith adherence to strict timelines. Support compliance certification activities, such as SOC2, FedRAMP, ISO 27001, etc. Identify, research, evaluate, and integrate new compliance requirements and industry standards/trends into the product security program. Guide teams to make decisions that balance business needs with security objectives. Thinks across organizational boundaries and empathizes with customers, both internal and external. Perform other related duties and responsibilities, as assigned. Job Qualifications: Bachelor’s degree in Computer Science, Information Systems, or related field. 4+ years industry experience in Information Security. Working knowledge of regulat
Employer postings · Data from · Sources