Principal Med Device Security Engineer
Johnson & Johnson · Danvers, MA +49 more
IT & SoftwareFull-time$102k–$177kCompany career page
The apply link worked recently (not employer-confirmed).
Role summary
Johnson & Johnson seeks a Principal Product Security Engineer to lead cybersecurity strategy for the Heart Recovery medical device portfolio. The role encompasses pre-market and post-market security architecture, threat modeling, and regulatory compliance across cardiac support systems and connected devices.
What they're looking for
- Experience with medical device security and FDA cybersecurity requirements
- Expertise in embedded systems security, firmware protection, and cryptographic controls
- Knowledge of wireless communication security (Bluetooth LE, NFC, Wi-Fi, 5G)
- Proficiency in secure development lifecycle and threat modeling methodologies
- Understanding of regulatory standards: NIST 800-175, FIPS 140-3, IEC 62443
- Experience with key management infrastructure and hardware security modules
What you'll be doing
- Implement secure boot, firmware integrity validation, and anti-tamper mechanisms for medical device firmware
- Define and enforce cryptographic protocols and key management infrastructure for device identity and authentication
- Lead secure development lifecycle practices including threat modeling, code analysis, and penetration testing coordination
- Develop vulnerability assessment techniques for wireless communications in medical devices
- Support post-market security monitoring, patching plans, and customer security questionnaire responses
Privacy & handoff
This role links to Johnson & Johnson's own application system. RoleLantern records your interest and checks the link, but the application happens on the employer's site and status updates may not come back to us. Clicking apply does not mark you as applied automatically.