IT Security Engineer

This entry-level role supports the organization’s cybersecurity program with a focus on IT security operations and Governance, Risk, and Compliance (GRC) within a highly regulated medical device environment. You will gain hands-on experience protecting sensitive data, manufacturing systems, and regulated products while learning industry standards such as FDA cybersecurity guidance, ISO 13485, and NIST frameworks.

Responsibilities

• IT Security Operations Support
  • Assist in monitoring security alerts and events using SIEM/XDR tools (e.g., Microsoft Sentinel, Defender)
  • Support incident response activities including triage, documentation, and escalation
  • Help maintain endpoint security, vulnerability scanning, and patch tracking
  • Participate in security investigations under guidance of senior analysts
• Governance, Risk & Compliance (GRC)
  • Support development and maintenance of security policies, procedures, and standards
  • Assist in performing risk assessments for IT systems, applications, and medical devices
  • Help track and document risks, remediation plans, and control effectiveness
  • Contribute to audit preparation and evidence gathering for: FDA cybersecurity requirements, ISO 13485 / ISO 27001, NIST Cybersecurity Framework
  • Maintain compliance documentation and assist in control testing activities
• Data Protection & Security Controls
  • Support implementation and monitoring of controls for: sensitive data (PHI, PII, IP), access control and identity management
  • Assist with user access reviews and least privilege enforcement
  • Help monitor data protection tools (DLP, encryption, logging)
• Product & Regulatory Awareness
  • Learn fundamentals of medical device cybersecurity and secure product lifecycle practices
  • Assist in documenting security requirements for systems supporting product development and manufacturing
  • Support tracking of vulnerabilities and issues impacting device software or connected systems
• Security Awareness & Training
  • Help coordinate cybersecurity awareness campaigns across the organization
  • Support phishing simulations and user training initiatives
  • Promote a culture of security and compliance awareness
• Documentation & Reporting
  • Maintain records of incidents, risks, and compliance activities
  • Assist in developing dashboards and reports on risk posture, compliance status, and security metrics

Requirements

• Bachelor’s Degree in Cybersecurity, Information Technology, Information Systems or a related field
• In lieu of a Bachelor’s degree, candidates must have 3-5 years of experience in Cybersecurity, Information Technology, or Information Systems

Qualifications

• Basic understanding of networking and operating systems, information security concepts (CIA triad, access control, vulnerabilities)
• Strong interest in cybersecurity within regulated environments
• Strong organizational, analytical, and communication skills
• Familiarity with security frameworks (NIST CSF, ISO 27001) and basic compliance concepts (audit, controls, risk)
• Exposure (academic or hands-on) to: SIEM tools, vulnerability scanning tools, identity and access management
• Interest in medical devices, healthcare technology, or manufacturing environments

Skills

• Security monitoring and incident response fundamentals
• Risk assessment and compliance processes
• Regulatory awareness (FDA, ISO, NIST)
• Security documentation and audit preparation
• Communication of technical risk in a business context

Key Performance Indicators (KPIs)

• Accuracy and timeliness of risk and compliance documentation
• Participation in incident response and alert triage
• Completion of assigned audit and compliance support tasks
• Quality of reports and documentation maintained
• Progress in training and certification milestones

This position is not eligible for employer-visa sponsorship.

Pay

The annual salary range for this position is $69,900 - $108,300. The actual compensation may vary based on geographic location, work experience, education, and skill level.

Benefits

• Competitive compensation
• Excellent healthcare including medical, dental, vision, and prescription coverage
• Short & long term disability plus life insurance — cost paid fully by CONMED
• Retirement Savings Plan (401K) — CONMED matches your contributions dollar for dollar, with the potential for up to 7% per pay period
• Employee Stock Purchase Plan — allows stock purchases at a discounted price
• Tuition assistance for undergraduate and graduate level courses