Security Engineer Product Analyst

Johnson & Johnson

Confirmed live yesterday High trust
Closes in 5 days Hybrid

Quick summary

Work type
Hybrid
Location
New Brunswick, NJWest Chester, PAPalm Beach Gardens, FLWarsaw, INRaynham, MA
Salary
$81,000–$131,100 / yr
Employment
Full-time
Posted
2 days ago
Freshness
Confirmed live yesterday
Closes
Nov 9, 2026 (soon)

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $182k
This role $106k
$65k $235k
below market most similar roles pay here above market

This role pays less than 95% of similar roles. Most pay $148,750–$215,178 — the blue band above. At the midpoint, this role pays about $106k versus about $182k for comparable roles.

Based on 240 similar postings.

Employer

About Johnson & Johnson

Johnson & Johnson is a multinational corporation operating in three main segments: consumer health products, pharmaceuticals, and medical devices, known for brands like Tylenol, Band-Aid, and Janssen. Industry: Pharmaceuticals & Medical Devices

Johnson & Johnson currently has 43 open roles on FindRole.

Listed pay typically runs $117,000–$201,250 across 31 roles with salary data.

Most-posted roles

View all roles at Johnson & Johnson

At a glance

TL;DR · Security Engineer Product Analyst

The Exp, Analyst, Security Engineer Product joins the DePuy Synthes Technology organization to protect digital products and connected medical technologies. This role involves embedding security practices throughout the product lifecycle by partnering with engineering, quality, and regulatory teams to identify risks early and design secure solutions. Key responsibilities include performing threat modeling, vulnerability analysis, and security risk assessments while supporting static and dynamic analysis, penetration testing coordination, and vulnerability validation. The successful candidate will utilize knowledge of secure development lifecycle practices, security-by-design principles, and frameworks such as ISO, NIST, and OWASP. The role addresses the technical challenge of ensuring medical devices and digital health products meet rigorous cybersecurity and regulatory expectations, specifically focusing on FDA premarket and postmarket guidance within a highly regulated, innovation-driven healthcare environment.

What you'll do

  • Integrate security requirements and controls into the design and development of digital and connected products.
  • Perform product security risk assessments, threat modeling, and vulnerability analysis across the product lifecycle.
  • Partner with engineering, quality, and regulatory teams to support secure design reviews and remediation activities.
  • Support security testing activities including static and dynamic analysis, penetration testing coordination, and vulnerability validation.
  • Track, document, and manage product security findings to closure in alignment with internal governance processes.
  • Contribute to the development and maintenance of product security standards, procedures, and best practices.
  • Monitor emerging cybersecurity threats, vulnerabilities, and regulatory guidance relevant to medical devices.
  • Support audits, assessments, and regulatory inquiries related to product cybersecurity.

What we're looking for

  • Bachelor’s degree in Computer Science, Engineering, Information Security, or a related technical field.
  • Master’s degree in Cybersecurity, Computer Engineering, or a related discipline (preferred).
  • 2–4 years of relevant professional experience in cybersecurity, product security, or secure software development.
  • Working knowledge of secure development lifecycle (SDLC) practices and security-by-design principles.
  • Experience conducting security risk assessments, threat modeling, or vulnerability analysis.
  • Familiarity with common security standards and frameworks such as ISO, NIST, or OWASP.
  • Experience supporting cybersecurity activities in a regulated industry like medical devices or healthcare (preferred).
  • CISSP, CSSLP, GSEC, or equivalent security certification (preferred).

More like this

Similar roles

Staff Product Security Engineer

Abbott

St. Paul, MN 76 days ago $99,300–$198,700
C/C++ Python Linux Embedded Systems Firmware Secure Boot PKI Threat Modeling STRIDE OWASP SBOM CVE Penetration Testing Fuzz Testing TPM ARM RTOS NXP i.MX VxWorks ISO 27001 NIST Cybersecurity Framework
8+ yrs exp

Product Security Engineer, Programs

Anduril Industries

Quincy, MA +1 118 days ago $184,000–$240,000
C/C++ Golang Rust Python Linux Firmware IoT Embedded Systems Reverse Engineering Anti-tamper Programmable Logic Devices JSIG ICD 503 CSEIG SSECG NIST SP 800-160 CMMC Cyber Survivability

Cloud Product Security Engineer

Allstate

Remote (IL) 50 days ago $90,700–$195,700
Python Java JavaScript AWS Azure CI/CD Infrastructure as Code CSPM DLP SIEM SDLC Cloud Security Automated Testing Networking Storage Compute Encryption Logging
3+ yrs exp Remote

Product Security Engineer / Architect, Email Security

State Street

Boston, MA +4 77 days ago
Microsoft Defender for Office 365 Proofpoint Abnormal Security Mimecast Cisco Secure Email SPF DKIM DMARC SMTP SIEM SOAR Identity Security Threat Intelligence Scripting Security Architecture CISSP CCSP GIAC
8+ yrs exp Hybrid

Security Architect, Product Security

Humana

Remote (Atlanta, GA) +10 42 days ago
Application Security SAST SCA Secrets Scanning Secure SDLC Vulnerability Management Cloud Security Container Security API Security DAST SaaS Security Product Security Security Architecture CISSP Security+ CSSLP GSEC GWAPT
2+ yrs exp Remote

Senior Product Manager, AppSec

Capital One Financial

McLean, VA +4 103 days ago
AppSec SAST DAST SCA DevSecOps CI/CD IaC Containers APIs OWASP Top 10 Penetration Testing Vulnerability Management Prompt Engineering Software Supply Chain Security Cloud-Native CISSP CISM OSCP
6+ yrs exp