Exp, Analyst, Security Engineer Product

Johnson & Johnson seeks an experienced security analyst to embed cybersecurity practices throughout the product lifecycle for DePuy Synthes digital and connected medical technologies. The role involves risk assessments, threat modeling, and cross-functional collaboration with engineering and regulatory teams in a highly regulated environment.

Responsibilities

• Integrate security requirements and controls into design and development of digital and connected products
• Perform product security risk assessments, threat modeling, and vulnerability analysis across product lifecycle
• Coordinate with product development, quality, and regulatory teams on secure design reviews and remediation
• Support security testing activities including static/dynamic analysis and penetration testing coordination
• Track, document, and manage product security findings to closure and contribute to security standards development

Requirements

• Bachelor's degree in Computer Science, Engineering, Information Security, or related technical field
• 2–4 years of professional experience in cybersecurity, product security, or secure software development
• Working knowledge of secure development lifecycle (SDLC) practices and security-by-design principles
• Experience conducting security risk assessments, threat modeling, or vulnerability analysis
• Familiarity with common security standards and frameworks (ISO, NIST, OWASP)
• Strong analytical, documentation, and communication skills with cross-functional collaboration ability
• English proficiency required; preferred certifications include CISSP, CSSLP, or GSEC