Lead IT Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Lead Information Security Engineer in charge of protecting CONMED's digital ecosystem across product development and enterprise IT. Overseeing the security of medical devices and compliance with global regulations.
Responsibilities:
- The Lead Information Security Engineer is a senior cybersecurity leader responsible for protecting the organization’s digital ecosystem across product development, manufacturing, and enterprise IT systems.
- This role ensures the security of connected medical/surgical devices, intellectual property, and regulated environments, while maintaining compliance with cybersecurity guidance, ISO standards, and global regulations.
- This position plays a critical role in enabling secure product innovation, patient safety, and operational resilience across the device lifecycle.
- Lead detection and response for incidents affecting: manufacturing systems (OT/ICS), connected medical/surgical devices, and enterprise IT environments
- Manage SOC operations with prioritization of IT security, production integrity, and supply chain impact
- Investigate and respond to incidents involving intellectual property theft, disruptions and/or ransomware affecting production lines, and IT vulnerabilities
Requirements:
- Bachelor’s degree in Cybersecurity, Engineering, IT, or related field (or equivalent experience)
- 5+ years of experience in cybersecurity, with exposure to regulated industries or manufacturing environments, with hands-on experience with SIEM/XDR platforms, endpoint, network, and cloud security and/or vulnerability and incident response programs
- Strong knowledge of Security frameworks (NIST, ISO 27001), Identity and access management & network segmentation and Zero Trust principles
- Experience in medical device, healthcare technology, or manufacturing (OT/ICS)
- Familiarity with ISO27001, NIS2, SOX, NIST CF 800-53, & EU GDPR
- Preferred Certifications: CISSP, CEH, GIAC & GICSP (Industrial Control Systems) or HCISPP (strong plus)
- Experience with IT/Production security testing, Threat modeling (e.g., STRIDE), Secure SDLC practices
Benefits:
- Competitive compensation
- Excellent healthcare including medical, dental, vision and prescription coverage
- Short & long term disability plus life insurance -- cost paid fully by CONMED
- Retirement Savings Plan (401K) -- CONMED matches your contributions dollar for dollar, with the potential for up to 7% per pay period
- Employee Stock Purchase Plan -- allows stock purchases at discounted price
- Tuition assistance for undergraduate and graduate level courses
Similar Jobs
Security Engineer
Security Engineer managing application-level monitoring and incident response in US Government classified environments. Collaborating with teams to evolve security tools in a hybrid world.
Staff Product Marketing Manager – Quantum Networking, Security
Staff Product Marketing Manager leading go-to-market strategy for IonQ’s quantum networking and security products. Connecting product strategy to market narrative and supporting revenue-driving efforts.
Information Security Engineer III
IS Security Engineer III managing corporate security. Focused on designing and developing solutions to support business strategies at CareOregon.
Security Engineer
Security Engineer working with Okta's identity solutions for Cyber Security team. Leading security architecture discussions and delivering identity modernization projects for clients.
Technical Account Manager II, Security
Technical Account Manager II at Akamai managing customer relationships in Application Security focusing on API vulnerabilities. Engaging with enterprise customers to provide valuable cybersecurity solutions.
Physical Security Lead
Head of Physical Security leading Fresenius Medical Care’s global physical security program. Overseeing security governance and healthcare-specific risks across various facilities.
Corporate Security Intelligence Lead
Corporate Security Intelligence Lead developing and executing security strategies to mitigate threats for Fresenius Medical Care. Managing intelligence functions and insider threat risk programs with cross-functional collaboration.
Cybersecurity Account Executive – Commercial
Cybersecurity Account Executive responsible for enhancing security resilience and driving sales. Develops strategies for client accounts within Cisco's comprehensive security portfolio.
Coordinador/a Pentesting
Coordinador/a de Pentesting para proyecto del sector seguros en modalidad full-remote. Buscamos un perfil con más de 4 años de experiencia en seguridad cloud y pruebas de penetración.
Senior Network and Security
Engineer for designing and maintaining secure network infrastructure at Inetum, a leader in digital services in Europe. Collaborating in a dynamic, innovative environment.
Sales Manager – Enterprise Security, Technology Services
Sales Manager for A&O IT Group driving revenue growth in UAE. Handling enterprise and strategic accounts in cybersecurity and technology services with C-level engagement.
Incident Response Engineer
Incident Response Engineer responsible for investigating security incidents and operating SIEM. Joining Cashea to enhance financial inclusion for Venezuelans with a buy now, pay later model.
Senior Security Engineer
Senior Security Engineer improving security of platforms, products, and engineering processes for Intel 471. Leading application security, secure SDLC, and cloud security initiatives.
Cyber Security Architect
Cyber Security Architect with PFH Technology Group providing security architecture review and threat modelling alongside senior architecture colleagues. Engaging in technical review and design validation work across complex health and infrastructure initiatives.
Analista de Segurança da Informação Pleno – Pentest
Analista de Segurança da Informação developing secure applications and conducting penetration testing for Omie. Focused on web application security and API testing with detailed reporting on vulnerabilities.
Network Security Engineer
Network Security Engineer providing client-centered IT services focusing on enterprise applications and cloud platforms. Collaborating with teams for scalable solutions and managed services.
Principal Cybersecurity Regulatory Advisor
Principal Cybersecurity Regulatory Advisor serving as the primary expert on commercial product cybersecurity regulation at GE Vernova. Translating complex regulations into actionable business guidance.
Principal Product Cyber Security Architect
Product Cybersecurity Architect designing security architectures for GE Vernova power sectors. Leading secure development support, threat modeling, and recommendations for product lifecycle.
Senior Security Engineer
Senior Security Engineer overseeing security controls for Microsoft Sentinel and Defender for Endpoint at Fairway. Collaborating on detection engineering efforts and mentoring team members in security best practices.
Security Engineer
Security Engineer leveraging Microsoft security stack to manage cyber threats at Fairway Home Mortgage. Focus on incident response and vulnerability management in a remote role.