IT Security Engineer

CONMED Corporation • Largo, FL

23h • $69,900 - $108,300

About The Position

The IT Security Engineer will support the organization’s cybersecurity program with a focus on IT security operations and Governance, Risk, and Compliance (GRC) within a highly regulated medical device environment. This entry-level role provides hands-on experience in protecting sensitive data, manufacturing systems, and regulated products, while learning industry standards such as FDA cybersecurity guidance, ISO 13485, and NIST frameworks. The Analyst will gain exposure to both technical security controls and risk/compliance processes, contributing to the organization’s mission of ensuring patient safety and product integrity.

Requirements

• Bachelor’s Degree in Cybersecurity, Information Technology, Information Systems or a related field
• In Lieu of a Bachelors degree, candidates must have 3-5 years of experience Cybersecurity, Information Technology, Information Systems

Nice To Haves

• Basic understanding of networking and operating systems, information security concepts (CIA triad, access control, vulnerabilities)
• Strong interest in cybersecurity within regulated environments
• Strong organizational, analytical, and communication skills
• Familiarity with security frameworks (NIST CSF, ISO 27001) and Basic compliance concepts (audit, controls, risk)
• Exposure (academic or hands-on) to: SIEM tools, vulnerability scanning tools, identity and access management
• Interest in medical devices, healthcare technology, or manufacturing environments

Responsibilities

• Assist in monitoring security alerts and events using SIEM/XDR tools (e.g., Microsoft Sentinel, Defender)
• Support incident response activities including triage, documentation, and escalation
• Help maintain endpoint security, vulnerability scanning, and patch tracking
• Participate in security investigations under guidance of senior analysts
• Support development and maintenance of security policies, procedures, and standards
• Assist in performing risk assessments for IT systems, applications, and medical devices
• Help track and document risks, remediation plans, and control effectiveness
• Contribute to audit preparation and evidence gathering for: FDA cybersecurity requirements, ISO 13485 / ISO 27001, NIST Cybersecurity Framework
• Maintain compliance documentation and assist in control testing activities
• Support implementation and monitoring of controls for: Sensitive data (PHI, PII, IP), Access control and identity management
• Assist with user access reviews and least privilege enforcement
• Help monitor data protection tools (DLP, encryption, logging)
• Learn fundamentals of medical device cybersecurity and secure product lifecycle practices
• Assist in documenting security requirements for systems supporting product development and manufacturing
• Support tracking of vulnerabilities and issues impacting device software or connected systems
• Help coordinate cybersecurity awareness campaigns across the organization
• Support phishing simulations and user training initiatives
• Promote a culture of security and compliance awareness
• Maintain records of incidents, risks, and compliance activities
• Assist in developing dashboards and reports on Risk posture, Compliance status, and Security metrics

Benefits

• Competitive compensation
• Excellent healthcare including medical, dental, vision and prescription coverage
• Short & long term disability plus life insurance -- cost paid fully by CONMED
• Retirement Savings Plan (401K) -- CONMED matches your contributions dollar for dollar, with the potential for up to 7% per pay period
• Employee Stock Purchase Plan -- allows stock purchases at discounted price
• Tuition assistance for undergraduate and graduate level courses
• Employee Referral Program incentives

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level