Product Security Manager

Johnson & Johnson

Product Security Manager at Johnson & Johnson enhancing medical device security strategy. Collaborating with teams for secure product development and compliance.

Posted 6/17/2026full-timeMilpitas • California, Maine, Nevada, Pennsylvania, South Carolina • 🇺🇸 United StatesSeniorLead💰 $118,000 - $203,550 per yearWebsite

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Supporting JJV throughout a new product’s development phases
Review product security requirements and recommend security design solutions
Help complete Quality documentation, threat modelling, penetration testing, software architecture review and design recommendations, code analysis and other security testing or work as needed.
Post market responsibilities for JJV marketed devices include monitoring for new vulnerabilities, assisting with patching and remediation plans, as well as responding to all customer security questionnaires and reviewing security language within contractual agreements.
Drive adherence to J&J Product Security’s overarching framework: Champion Product Security strategy and objectives within JJV
Partner with internal organizations to enhance existing processes and policies
Create and present Product Security metrics to management
Responsible and accountable to implement and enforce Product Security governance model for JJV pre and post market medical devices.
Perform automated code scanning and coordinate formal security testing.
Respond to customer cybersecurity questionnaires and contractual language for all post-market medical devices.
Other MedTech cybersecurity related duties as needed

Requirements

What you’ll need

8 years IT or cybersecurity experience
Bachelor’s degree or equivalent
A minimum of 8 years of progressive experience in leadership roles within information technology or cybersecurity functions
Threat modeling experience
Data privacy experience, including GDPR and CCPA
Understanding of HIPAA/HITRUST & ISO 27001
Understanding of penetration testing, vulnerability scanning, CVSS and/or other general security testing principles
Ability to work autonomously and proactively seek out security opportunities within JJV
Knowledge of traditional and real-time operating systems (i.e. QNX, Windows Embedded) hardening techniques
Ability to create and deliver cybersecurity awareness campaigns and other communications
Ability to translate technical security requirements into solutions
Ability to provide secure coding recommendations
Ability to lead large projects and proven ability to track to project plan timelines from a security perspective
Ability to write technical security requirements for embedded systems and web platforms
Creative problem-solving skills
Customer focus (internal & external)
Excellent communication and collaboration skills, able to network, interface and influence at all levels of the organization, cross sector, cross-functionally and globally
Strong leadership skills

Benefits

Comp & perks

Vacation –120 hours per calendar year
Sick time - 40 hours per calendar year; for employees who reside in the State of Colorado –48 hours per calendar year; for employees who reside in the State of Washington –56 hours per calendar year
Holiday pay, including Floating Holidays –13 days per calendar year
Work, Personal and Family Time - up to 40 hours per calendar year
Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child
Bereavement Leave – 240 hours for an immediate family member: 40 hours for an extended family member per calendar year
Caregiver Leave – 80 hours in a 52-week rolling period10 days
Volunteer Leave – 32 hours per calendar year
Military Spouse Time-Off – 80 hours per calendar year

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

threat modelingpenetration testingvulnerability scanningcode analysisautomated code scanningsecure codingGDPRCCPAHIPAAISO 27001

Soft Skills

leadershipproblem-solvingcustomer focuscommunicationcollaborationautonomyproactivityinfluencenetworkingproject management

Certifications

Bachelor's degreeIT certificationcybersecurity certification