Senior Product Security Engineer

Principal Product Security Engineer – Johnson & Johnson

Join to apply for the Principal Product Security Engineer role at Johnson & Johnson
.

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and Med Tech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity.

Learn more at

Technology Enterprise Strategy & Security.

Security & Controls.

Scientific/Technology.

Danvers, Massachusetts, United States of America;
Raritan, New Jersey, United States of America.

Johnson & Johnson’s Med Tech cybersecurity team is recruiting for an experienced Sr Product Security Engineer to be based in Danvers, MA or Raritan, NJ. This role can also be remote or hybrid work. This role will require up to 10% travel.

As the world’s most comprehensive Med Tech business, J&J Med Tech Companies are building on a century of experience, merging science and technology, to shape the future of health and benefit even more people around the world. With our unparalleled breadth, depth and reach across heart recovery, surgery, orthopedics and interventional solutions, we’re working to profoundly change the way care is delivered.

We are in this for life. For more information, visit

At Johnson & Johnson, we all belong.

Are you passionate about security and interested in joining a community of collaborative colleagues working in a Patient First! culture? If that’s you, we have an immediate opportunity for a Sr Product Security Engineer to join the Product Cybersecurity team to help ensure security is implemented by design for this top‑performing medical device company. This is an exciting opportunity to impact development initiatives that will shape future product development and industry standards.

You will own the Product Security process for the products that you will support throughout the product development lifecycle which includes both pre‑market and post‑market processes engineering teams. If you are eager to leverage your security risk and compliance skills to make a difference and directly impact patient lives, this could be perfect for you.

The Senior Product Security Engineer will be responsible for implementation of J&J’s enterprise Product Security strategy and framework throughout the Heart Recovery portfolio of medical devices and supporting platforms. This role will join Abiomed, part of Johnson & Johnson Med Tech, to provide technical expertise and strategic leadership in securing Impella heart pump technologies, next‑generation cardiac support systems, and connected medical devices.

This role is responsible for delivering security architecture, cryptographic controls, embedded system protections/controls, and threat mitigation techniques to ensure robust, regulatory‑compliant security across the product lifecycle. Specific responsibilities include supporting heart recovery throughout a new product’s development phases; reviewing product security requirements and recommending security design solutions; completing quality documentation, threat modelling; coordinating third‑party penetration testing; software architecture review and design recommendations;

code analysis and other security testing work as needed.

Additionally, this position will have post‑market responsibilities for Heart Recovery marketed devices including monitoring for new vulnerabilities, assisting with patching and remediation plans, as well as responding to customer security questionnaires and reviewing security language within contractual agreements as needed.

• Drive alignment to J&J Product Security’s overarching framework.
• Support the Product Security strategy and objectives within Heart Recovery.
• Define and implement secure boot, firmware integrity validation, and anti‑tamper mechanisms to protect…