Principal Product Security Engineer

Position: Principal  Product Security Engineer
This job is with Johnson & Johnson, an inclusive employer and a member of my Gwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly.

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and Med Tech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn

more at

Job Function:
Technology Enterprise Strategy & Security

Job Sub     Function:
Security & Controls

Job Category:
Scientific/Technology

All Job Posting Locations:
Danvers, Massachusetts, United States of America, Raritan, New Jersey, United States of America

Job Description:

Johnson & Johnson's Med Tech cybersecurity team is recruiting for an experienced Sr Product Security Engineer to be based in Danvers, MA or Raritan, NJ.  This role can also be remote or hybrid work.  This role will require up to 10% travel.
As the world's most comprehensive Med Tech business, J&J Med Tech Companies are building on a century of experience, merging science and technology, to shape the future of health and benefit even more people around the world. With our unparalleled breadth, depth and reach across heart recovery, surgery, orthopedics and interventional solutions, we're working to profoundly change the way care is delivered.

We are in this for life. For more information, visit  
At Johnson & Johnson, we all belong.
Are you passionate about security and interested in joining a community of collaborative colleagues working in a Patient First! culture? If that's you, we have an immediate opportunity for a  Sr Product Security Engineer  to join the Product Cybersecurity team to help ensure security is implemented by design for this top-performing medical device company. This is an exciting opportunity to impact development initiatives that will shape future product development and industry standards.

You will own the Product Security process for the products that you will support throughout the product development lifecycle which includes both pre-market and post-market processes engineering teams.  If you are eager to leverage your security risk and compliance skills to make a difference and directly impact patient lives, this could be perfect for you.
Purpose :
The Senior Product Security Engineer will be responsible for implementation of J&J's enterprise Product Security strategy and framework throughout the Heart Recovery portfolio of medical devices and supporting platforms. This role will join Abiomed, part of Johnson & Johnson Med Tech, to provide technical expertise and strategic leadership in securing Impella heart pump technologies, next-generation cardiac support systems, and connected medical devices.

This role is responsible for delivering security architecture, cryptographic controls, embedded system protections/controls, and threat mitigation techniques to ensure robust, regulatory-compliant security across the product lifecycle.  Specific responsibilities include supporting heart recovery throughout a new product's development phases, review product security requirements and recommend security design solutions, complete Quality documentation, threat modelling, coordinate third-party penetration testing, software architecture review and design recommendations, code analysis and other security testing work as needed.
Additionally, this position will have post market responsibilities for Heart Recovery marketed devices include monitoring for new vulnerabilities, assisting with patching and remediation plans, as well as responding to customer security questionnaires and reviewing security language within contractual agreements as needed.
Drive alignment to J&J Product Security's overarching framework.

Support the Product Security strategy and objectives within Heart Recovery

Define and implement secure boot, firmware…