Principal Product Security Engineer
Not Disclosed•Full-TimeHybrid
location_onHybrid
About the Team
At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions to deliver the breakthroughs of tomorrow.
This role sits within the newly formed Product Security team at Abiomed, a top-performing medical device company within the Johnson & Johnson family. We operate in a "Patient First!" culture, ensuring that security is implemented by design to protect the future of patient care.
Work location
Work model: Hybrid
Hybrid
Key Responsibilities
- check_circlePartner with engineering teams to drive adherence to product security policies and program objectives
- check_circleCreate, update, and improve product security processes throughout the development lifecycle
- check_circleDrive and monitor post-market vulnerability management activities within strict timelines
- check_circleSupport compliance certification activities such as SOC2, FedRAMP, and ISO 27001
- check_circleIdentify and integrate new compliance requirements and industry standards into security programs
- check_circleGuide teams to balance business needs with medical device security objectives
- check_circleDeliver pre-market documentation including security plans, threat models, and risk management artifacts
- check_circleAct as a subject matter expert to provide cybersecurity guidance to development teams
Requirements
- verifiedBachelor's degree
- verified5+ years industry experience in Information Security
- verifiedWorking knowledge of regulatory standards and compliance frameworks (e.g., NIST Cybersecurity Framework, ISO27001, SOC2, HIPAA, GDPR)
- verifiedExperience with security risk management techniques
Nice to Have
Experience working in a regulated environment, specifically FDA-regulated.
Benefits & Perks
check_circleMedical, dental, vision, life, short- and long-term disability, business accident, and group legal insurancecheck_circleCompany-sponsored consolidated retirement plan (pension) and 401(k) savings plancheck_circleVacation time up to 120 hours per calendar yearcheck_circleSick time up to 40 hours per calendar year (56 hours for Washington residents)
