Johnson & Johnson is currently recruiting for an Application Security Senior Analyst - Customer Connectivity. This position is located in Piscataway, NJ.
Caring for the world, one person at a time has inspired and united the people of Johnson & Johnson for over 130 years. We embrace research and science -- bringing innovative ideas, products and services to advance the health and well-being of people.
With $81.6 billion in 2018 sales, Johnson & Johnson is the world's most comprehensive and broadly-based manufacturer of health care products, as well as a provider of related services, for the consumer, pharmaceutical, and medical devices markets. There are more than 250 Johnson & Johnson operating companies employing over 125,000 people and with products touching the lives of over a billion people every day, throughout the world. If you have the talent and desire to touch the world, Johnson & Johnson has the career opportunities to help make it happen.
As a part of the Information Security Risk Management Supply Chain group, the ISRM Senior Analyst – Customer Connectivity is responsible for supporting the development and implementation of a green-field security program which spans e-commerce, hospital systems integration, contracts management, and customer call center security.
- Provide security consulting and assurance via secure architecture design reviews on projects and new implementations
- Shape security user stories and provide security solution/remediation guidance across both on premise and cloud/SaaS hosted platforms
- Provide mentorship on secure coding; lead and support adoption and implementation of secure CI/DC and DevSecOps practices including integration of static analysis, software composition analysis, and dynamic analysis tools
- Provide consulting on security patterns for microservices, APIs and serverless architectures.
- Assist in site, vendor and full-stack technology assessments existing customer call center sites, systems and vendor relationships. Rank risks; provide security remediation guidance across Information Technology solutions (applications, databases, infrastructure, networks, industrial Internet of Things); facilitate penetration testing.
- Provide consulting to IT teams on secure application architecture and design, secure coding, adoption and implementation of secure Continuous Integration/Continuous Delivery practices, and security patterns for microservices, APIs and serverless architectures.
- Perform assessments and design reviews of solutions and environments, analyzing and triaging output of scan tools and penetration testing, ranking risks and providing and guidance, solution design and technology options for remediation.
- Contribute SME knowledge to help shape the strategy and security program for J&J Customer facing IT solutions.
- Monitor the industry landscape for emerging threats, technologies and capabilities.
- A minimum of a bachelor’s degree is required. Preferably in cybersecurity or computer science.
- A minimum of 2 years of experience working in software development with a security focus is required.
- Hands-on implementation level understanding of software design and development principles, processes and tooling is required.
- Experience analyzing software architecture to identify security gaps and designing solutions is required.
- Strong knowledge of the security landscape including trends in process, tooling and threats is required.
- An understanding of cloud and virtualized environments is required.
- Hands-on experience of integration with hospitals and health-care environments is preferred.
- Experience of penetration testing and penetration testing tool is preferred.
- Experience of working within an incident response team is preferred.
- Demonstrable track record of working within large projects and handling multiple contending priorities is required.
- Big Picture/Attention to Detail – align strategic and tactical security aspects is required.
- Results Orientation/Sense of Urgency – ability to drive to tight timelines is required.
- A passion for software security is required.
- Creative problem-solving skills are required.
- Customer focus (internal & external) is required.
- Superb communication skills, able to network and influence at all levels of the organization, cross sector, cross-functionally and globally is required.
- This position is located in Piscataway, NJ and may require up to 5% travel.
Johnson & Johnson is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, or protected veteran status and will not be discriminated against on the basis of disability.
United States-New Jersey-Piscataway-
Johnson & Johnson Services Inc. (6090)