IT Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
IT Security Engineer supporting security operations, incident response, and GRC for CONMED, a global medical device company. Contributing to regulated product security, audits, risk tracking, and compliance reporting.
Responsibilities:
- Assist in monitoring security alerts and events using SIEM/XDR tools such as Microsoft Sentinel and Defender
- Support incident response activities including triage, documentation, and escalation
- Help maintain endpoint security, vulnerability scanning, and patch tracking
- Participate in security investigations under guidance of senior analysts
- Support development and maintenance of security policies, procedures, and standards
- Assist with risk assessments for IT systems, applications, and medical devices
- Track and document risks, remediation plans, and control effectiveness
- Contribute to audit preparation and evidence gathering for FDA cybersecurity requirements, ISO 13434 / ISO 27001, and the NIST Cybersecurity Framework
- Maintain compliance documentation and assist in control testing activities
- Support implementation and monitoring of controls for sensitive data, access control, and identity management
- Assist with user access reviews and least privilege enforcement
- Help monitor data protection tools including DLP, encryption, and logging
- Learn medical device cybersecurity and secure product lifecycle practices
- Document security requirements for systems supporting product development and manufacturing
- Track vulnerabilities and issues impacting device software or connected systems
- Help coordinate cybersecurity awareness campaigns, phishing simulations, and user training
- Maintain records of incidents, risks, and compliance activities
- Assist in developing dashboards and reports on risk posture, compliance status, and security metrics
Requirements:
- Bachelor’s Degree in Cybersecurity, Information Technology, Information Systems or a related field
- In lieu of a Bachelor’s degree, 3–5 years of experience in Cybersecurity, Information Technology, or Information Systems
- Basic understanding of networking and operating systems
- Understanding of information security concepts, including the CIA triad, access control, and vulnerabilities
- Strong interest in cybersecurity within regulated environments
- Strong organizational, analytical, and communication skills
- Familiarity with NIST CSF, ISO 27001, and basic compliance concepts such as audits, controls, and risk
- Academic or hands-on exposure to SIEM tools, vulnerability scanning tools, and identity and access management
- Interest in medical devices, healthcare technology, or manufacturing environments
- Must be able to work without employer visa sponsorship
Benefits:
- Competitive compensation
- Excellent healthcare including medical, dental, vision and prescription coverage
- Short & long term disability plus life insurance -- cost paid fully by CONMED
- Retirement Savings Plan (401K) -- CONMED matches your contributions dollar for dollar, with the potential for up to 7% per pay period
- Employee Stock Purchase Plan -- allows stock purchases at discounted price
- Tuition assistance for undergraduate and graduate level courses
- Employee Referral Program incentives
- Training and certification milestones
Similar Jobs
Security Project Manager
Security Project Manager leading Nasstar’s Telecoms Security Act and Ofcom compliance. Validating technical controls, assessing risks, and coordinating regulatory assurance across UK telecoms operations.
AI Security Consultant
AI Security Consultant helping PA Consulting clients secure LLMs, agentic systems and cloud environments. Designing practical controls, threat models and responsible AI-enabled security operations.
Senior Director, Cybersecurity GRC
Senior cybersecurity GRC leader modernizing governance, risk, compliance, and resilience programs at MoneyGram. Scaling automation and global teams for a regulated fintech organization.
Senior Information Security Engineer
Senior Information Security Engineer securing MoneyGram’s cross-border money transfer systems. Implementing detection, incident response, cloud security, vulnerability management, and automation controls.
IT Security Specialist – Identity & Access Management, Migration Consultant
IAM migration consultant leading enterprise authentication modernization from ForgeRock OpenAM to PingOne Advanced Identity Cloud and Microsoft Entra ID. Minimizing disruption through SSO implementation, testing, documentation, and post-migration support.
Residential Physical Security Specialist
Residential security specialist protecting Rocket Companies executives, private residences, and families. Coordinating executive protection assignments and mitigating physical security risks.
Security Engineer Consultant II
Security Engineer Consultant II designing and implementing cloud and application security solutions for Allstate’s insurance business. Supporting DevOps/SecOps, vulnerability management, and secure IaaS/PaaS/SaaS implementations.
Staff Security Engineer – Threat Detection
Staff Security Engineer building AI-powered threat detections and response workflows at Snowflake, a cloud data platform. Improving detection coverage, automation, and security analytics at global scale.
Security Director
Director of Security protecting Zcash wallets, protocols, and cryptographic infrastructure at ZODL. Leading incident response, audits, security policy, and proactive vulnerability mitigation across a distributed global team.
Senior Datadog Security – Observability Engineer
Senior Datadog engineer scaling detection engineering and security observability for Keeper Security’s cybersecurity platform. Building SIEM rules, telemetry pipelines, dashboards, and monitoring across AWS environments.
Engenheiro de Segurança do Trabalho
Engenheiro de Segurança do Trabalho remoto apoiando gestão de contingência e emergências na Petrobras. Elaborando planos, painéis Power BI, treinamentos, auditorias e análises de risco de processo.
Senior Agentic AI Specialist – Integrations, Security and Continuous Evolution
Especialista sênior evoluindo a plataforma AIDA de IA agêntica para integrações corporativas seguras. Implementando RAG, controles de segurança, validações e monitoramento contínuo dos agentes.
Senior Security Engineer
Senior Security Engineer developing and securing enterprise, cloud, and infrastructure cybersecurity solutions for European public-sector clients. Automating operations, hardening systems, and resolving security issues.
Senior Security Engineer, Data Loss Prevention
Senior Security Engineer protecting Fragomen’s immigration law firm data through enterprise DLP controls. Investigating exposure risks and integrating Microsoft 365, cloud, SaaS, endpoint, and SIEM security capabilities.
Security Systems Installation
Sr. Coordinator supporting Interface Systems’ managed business security installations. Troubleshooting Access Control, CCTV/VMS, alarms, and low-voltage systems for field technicians.
Security Alarm Technician
Security Alarm Technician installing and servicing intrusion, fire, surveillance, network, and wireless systems. Interface Systems delivers managed security, network, UCaaS, and business intelligence solutions.
Security Alarm Technician
Security Alarm Technician installing and servicing intrusion, fire, surveillance, access control, and network systems. Interface Systems delivers managed security, connectivity, and IT solutions to distributed enterprises.
Business Information Security Lead
Business Information Security Lead securing US Foods’ digital foodservice technology ecosystem. Managing cybersecurity risks, compliance, assessments, and remediation across DigiTech value streams.
Senior Security Engineer
Senior Security Engineer enhancing cybersecurity capabilities across multiple domains for EverCommerce. Collaborating with various teams to improve security posture in a growing environment.
Senior Consultant – Cloud Red Team, Blue Team
Sr. Consultant performing cloud-focused adversary emulation techniques. Collaborating with clients to validate security defenses and improve cloud security measures.