Software Engineer, Product Security

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal.

Job Function: R&D Product Development
Job Sub Function: R&D Software/Systems Engineering
Job Category:
Scientific/Technology
All Job Posting Locations:
Remote (US), Santa Clara, California, United States of America

Fueled by innovation at the intersection of biology and technology, we're developing the next generation of smarter, less invasive, more personalized treatments. Are you passionate about improving and expanding the possibilities of surgery? Ready to join a team that's reimagining how we heal? Our Surgery team will give you the chance to deliver surgical technologies and solutions to surgeons and healthcare professionals around the world.

Your contributions will help effectively treat some of the world's most prevalent conditions such as obesity, cardiovascular disease, and cancer. Patients are waiting. Your unique talents will help patients on their journey to wellness.

Remote work options may be considered on a case‑by‑case basis and if approved by the Company.

We are searching for the best talent for a Cybersecurity Software Engineer to be located in Santa Clara, CA. The role focuses on improving the software cybersecurity of our product, understanding cybersecurity controls and deliverables, and working closely with other software engineers and cross‑functional teams.

We are looking for an early in career Software Engineer who would help improve the software cybersecurity of our product. The position requires understanding of cybersecurity controls and deliverables, knowledge of C++ (preferably in a Linux environment), and the ability to work closely with other software engineers as well as multi‑functionally. The successful candidate is self‑motivated, curious, and has the desire to bring the essential and best‑in‑class cybersecurity controls and implementations into the medical field.

• Designing, implementing, and testing software solutions for cybersecurity controls.
• Defining software cybersecurity requirements and detailing the software design of the product based on cybersecurity requirements.
• Performing software code reviews and design reviews with a cyber‑lens.
• Performing periodic risk assessment of security vulnerabilities in software for the product by identifying and analyzing software vulnerabilities.
• Developing recommendations to mitigate security risks in product software.
• Developing product software using C++ and scripting languages such as bash in an FDA regulated environment.
• Actively collaborating with cross‑functional product partners including Product Security, systems, test, and service teams.
• Adhering to organization and product level quality processes outlined in the Quality Management System.

• BS or equivalent in Computer Science, Computer Engineering, or equivalent field.
• 2+ years of software development and testing experience.
• 2+ years of experience with software development using C++.
• 1+ year of experience implementing software controls for product/IOT cybersecurity.
• Knowledge of cybersecurity concepts such as encryption, authentication, and authorization.
• Working knowledge of Linux Ubuntu and understanding security controls provided by the operating system.
• Experience working with multi‑threaded applications.
• Familiarity with shell scripting languages including bash.

• MS/MEng in Cybersecurity, or similar field.
• Familiarity with CI/CD tools and Dev‑Sec‑Ops tools and processes.
• Experience working with Agile methodology as an individual contributor.
• Experience analyzing security risks from sources such as penetration testing, threat modeling, vulnerability management, etc.

• Must be at least 18 years of age.
• Ability to travel up to 10% domestic US and internationally, with overnight stay.
• Ability to work onsite at the J&J office in Santa Clara, CA.

The expected base pay range for…