Software Engineer, Product Security

Santa Clara, CA

Full-time

Hybrid

$103K/yr - $166K/yr

Entry Level

Johnson & Johnson develops medical devices, pharmaceuticals, and consumer packaged goods. They are seeking an early career Software Engineer focused on improving software cybersecurity for their products, requiring collaboration with other engineers and a strong understanding of cybersecurity controls.

Apply Now

Responsibilities

Designing, implementing, and testing software solutions for cybersecurity controls.
Defining software cybersecurity requirements and detailing the software design of the product based on cybersecurity requirements.
Performing software code reviews and design reviews with a cyber-lens.
Performing periodic risk assessment of security vulnerabilities in software for the product by identifying and analyzing software vulnerabilities.
Developing recommendations to mitigate security risks in product software.
Developing product software using C++ and scripting languages such as bash in an FDA regulated environment.
Actively collaborating with cross-functional product partners including Product Security, systems, test and service teams.
Adhering to organization and product level quality processes outlined in the Quality Management System.

Qualification

Required

BS or equivalent in Computer Science, Computer Engineering, or equivalent field.
2+ years of software development and testing experience.
2+ years of experience with software development using C++.
1+ years of experience implementing software controls for product/IOT cybersecurity.
Knowledge of cybersecurity concepts such as encryption, authentication and authorization.
Working knowledge of Linux Ubuntu and understanding security controls provided by the operating system.
Experience of working with multi-threaded applications.
Familiarity with shell scripting languages including bash.

Preferred

MS/MEng in Cybersecurity, or similar field.
Familiarity with CI/CD tools and Dev-Sec-Ops tools and processes.
Experience working with Agile methodology as an individual contributor.
Experience analyzing security risks from sources such as penetration testing, threat modeling, vulnerability management etc.