Professional, Quality Steward

Johnson & Johnson · New Brunswick, NJ +4 more

RoleLantern checked

QualityFull-timeCompany career page

The apply link worked recently (not employer-confirmed).

Role summary

DePuy Synthes seeks a Quality Steward to embed security principles into medical device development across the product lifecycle. The role partners with R&D, engineering, and regulatory teams to ensure devices are secure, compliant, and defensible, applying practical cybersecurity and regulatory knowledge.

What they're looking for

Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, or related technical field
4+ years product security, application security, or cybersecurity engineering experience
Demonstrated expertise applying Secure by Design principles throughout product development
Hands-on threat modeling experience for embedded, mobile, or connected systems
Knowledge of secure coding practices, OWASP Top 10, and security testing tools (SAST, DAST, SCA)
Experience with vulnerability management, CVE analysis, and CVSS scoring
Familiarity with AAMI TIR57, ISO 14971, and FDA cybersecurity guidance

What you'll be doing

Embed security requirements and design inputs into product development from concept through end-of-support
Facilitate threat modeling and security architecture reviews for connected devices and supporting services
Conduct cybersecurity risk assessments aligned to regulatory standards and integrate findings into risk management
Generate and maintain Software Bills of Materials; monitor third-party components for vulnerabilities
Coordinate penetration testing, triage findings, and track security remediation to closure

Privacy & handoff

This role links to Johnson & Johnson's own application system. RoleLantern records your interest and checks the link, but the application happens on the employer's site and status updates may not come back to us. Clicking apply does not mark you as applied automatically.

What RoleLantern checked

This role is listed from an approved source. RoleLantern checks that the application link is live and how recently the role appeared — the employer has not confirmed it directly on RoleLantern.

RoleLantern checked active

RoleLantern checkedNeeds clarity

Date postedToday

Last source checkToday

Salary listedNeeds clarity

Location clearClear

Something look off? Let us know and we may ask the employer to verify it.

See how you match this role

Upload your CV to see which of this role's requirements your background supports, where there may be gaps, and what needs clarification. Private by default — we never sell your CV.

See my match