Principal Product Security Engineer

$99,000 - $170,200/Yr

Johnson & Johnson - Charleston, WV

Full-time - Senior

Remote - Charleston, WV

Chemical Manufacturing

About the position

The Principal Product Security Engineer at Johnson & Johnson will play a crucial role in ensuring that security is integrated into the product development lifecycle for medical devices. This position involves collaborating with engineering teams to adhere to product security policies, creating and improving security processes, and managing compliance with industry standards. The role is pivotal in shaping future product development and industry standards, directly impacting patient lives through effective security measures.

Responsibilities

• Partner with engineering teams to ensure adherence to product security policies and processes.
• Create, update, and improve product security processes.
• Act as a Subject Matter Expert (SME) on cybersecurity matters and provide guidance to development teams.
• Advocate for the inclusion of cybersecurity input into all phases of the product lifecycle.
• Deliver documentation for pre-market product development activities, including security plans and risk management documentation.
• Drive and monitor post-market vulnerability management activities.
• Support compliance certification activities such as SOC2, FedRAMP, and ISO 27001.
• Identify and integrate new compliance requirements and best practices into product security programs.
• Maintain relationships with Information Sharing and Analysis Organizations.
• Guide teams to balance business needs with medical device security objectives.

Requirements

• Bachelor's degree in a relevant field.
• 5+ years of industry experience in Information Security.
• Working knowledge of regulatory standards and compliance frameworks (e.g., NIST Cybersecurity Framework, ISO27001, SOC2, HIPAA, GDPR).
• Experience with security risk management techniques.
• Demonstrated organizational skills and attention to detail.
• Strong communication and interpersonal skills.

Nice-to-haves

• Experience working in a regulated environment, particularly FDA-regulated.

Benefits

• Medical, dental, and vision insurance.
• Life insurance and short- and long-term disability coverage.
• Business accident insurance and group legal insurance.
• 401(k) retirement plan and pension.
• Vacation time up to 120 hours per calendar year.
• Sick time up to 40 hours per calendar year.
• Holiday pay including up to 13 days of paid holidays per year.
• Floating holidays and personal time off.