Johnson & Johnson, MedTech is recruiting for a Staff Software Product Security Engineer located in Santa Clara, CA (not remote).

Johnson & Johnson MedTech innovates at the intersection of biology and technology. With a focus on treating with pinpoint precision in the hardest-to-reach parts of the body, restoring anatomy and reimagining healing, our portfolio of smarter, less invasive, more personalized treatments is addressing the most complex diseases. Focus areas include: Interventional Solutions, Orthopaedics, Surgery and Vision.

The Staff Software Product Security Engineer will be a key member of the Ottava R&D Product Security organization, make vital contributions to the New Product Development (NPD) pipeline and transform patient care through innovation. They are accountable for leading our NPD teams and creating a strategy to implement cybersecurity into the design and development of product hardware and software for use in cutting edge medical devices and associated capital equipment.

Key Responsibilities:

• Take initiative in all areas of product & infrastructure development.
• Identify threats and vulnerabilities to patient safety and product integrity, assess current security controls and determine potential impact of a threat and the risk level associated with threat/vulnerability pairs.
• Work with quality, regulatory and other compliance orgs to identify product security imperatives and update the threat models based on them.
• Drive architecture and design discussion and ensure that decisions incorporate security considerations.
• Design and develop embedded system security software to integrate with mechanical, electrical, and distributed computing systems.
• Document designs and specifications per design control processes and conform to Industry Standards for Medical Device Software (IEC 62304). * Interact and interface with systems engineering, program management, development operations, control systems and other engineering teams to help implement security controls, evaluate code/design quality and calculate/disposition/register security vulnerabilities and risks