Principal Product Security Engineer

$99,000 - $170,200/Yr

Johnson & Johnson - Lansing, MI

Full-time - Mid Level

Remote - Lansing, MI

Chemical Manufacturing

About the position

The Principal Product Security Engineer at Johnson & Johnson is responsible for ensuring that security is integrated into the product development lifecycle for medical devices. This role involves collaborating with engineering teams to adhere to product security policies, creating and improving security processes, and acting as a subject matter expert on cybersecurity. The position requires a strong focus on both pre-market and post-market security activities, compliance certification, and the integration of industry standards into product security programs.

Responsibilities

• Partner with engineering teams to drive adherence to product security policies and processes.
• Create, update, and improve product security processes.
• Act as a subject matter expert on cybersecurity matters and provide guidance to development teams.
• Advocate for the inclusion of cybersecurity input into all phases of the product lifecycle.
• Deliver documentation for pre-market product development activities including security plans and risk management documentation.
• Drive and monitor post-market vulnerability management activities.
• Support compliance certification activities such as SOC2 and ISO 27001.
• Identify and integrate new compliance requirements and best practices into product security programs.
• Maintain relationships with information sharing organizations.
• Guide teams to balance business needs with medical device security objectives.
• Perform other related duties as assigned.

Requirements

• Bachelor's degree
• 5 years of industry experience in Information Security.
• Working knowledge of regulatory standards and compliance frameworks (e.g., NIST Cybersecurity Framework, ISO27001, SOC2, HIPAA, GDPR).
• Experience with security risk management techniques.
• Demonstrated organizational skills and attention to detail.
• Strong communication and interpersonal skills.

Nice-to-haves

• Experience working in a regulated environment, FDA-regulated.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• Short- and long-term disability insurance
• Business accident insurance
• Group legal insurance
• 401(k) retirement plan
• Vacation time (up to 120 hours per year)
• Sick time (up to 40 hours per year)
• Holiday pay (up to 13 days per year)
• Floating holidays
• Work, Personal and Family Time (up to 40 hours per year)