Principal Med Device Security Engineer

Johnson & Johnson seeks a Principal Product Security Engineer to lead cybersecurity strategy for the Heart Recovery medical device portfolio. The role encompasses pre-market and post-market security architecture, threat modeling, and regulatory compliance across cardiac support systems and connected devices.

Responsibilities

• Implement secure boot, firmware integrity validation, and anti-tamper mechanisms for medical device firmware
• Define and enforce cryptographic protocols and key management infrastructure for device identity and authentication
• Lead secure development lifecycle practices including threat modeling, code analysis, and penetration testing coordination
• Develop vulnerability assessment techniques for wireless communications in medical devices
• Support post-market security monitoring, patching plans, and customer security questionnaire responses

Requirements

• Experience with medical device security and FDA cybersecurity requirements
• Expertise in embedded systems security, firmware protection, and cryptographic controls
• Knowledge of wireless communication security (Bluetooth LE, NFC, Wi-Fi, 5G)
• Proficiency in secure development lifecycle and threat modeling methodologies
• Understanding of regulatory standards: NIST 800-175, FIPS 140-3, IEC 62443
• Experience with key management infrastructure and hardware security modules