Remote Lead IT Security Engineer – Medical Devices

FHLB Des Moines; Largo (FL); On-site; USD 104,000 - 164,000; Full time

Benefits offered by this job

Competitive compensation

Excellent healthcare coverage

401K with match

Employee stock purchase plan

Tuition assistance

Job summary

CONMED Corporation is seeking a Lead Information Security Engineer to safeguard our medical devices, production IT, and enterprise systems. The role emphasizes secure-by-design practices, threat modeling, and risk-based vulnerability management across the device lifecycle.

You will lead SOC operations, coordinate vulnerability disclosure, and ensure compliance with SOX, ISO 27001, and GDPR/NIS2. A remote working arrangement is available, with competitive compensation and extensive benefits.

Qualifications

• Bachelor’s degree in Cybersecurity, Engineering, IT, or related field (or equivalent experience)
• 5+ years of cybersecurity experience in regulated industries or manufacturing environments
• Hands-on experience with SIEM/XDR platforms, endpoint, network, and cloud security and/or incident response programs

Responsibilities

• Lead detection and response for incidents affecting manufacturing systems, connected medical devices, and enterprise IT environments
• Manage SOC operations with prioritization of IT security, production integrity, and supply chain impact
• Investigate and respond to incidents involving IP theft, disruptions, and ransomware
• Lead regulatory-aligned incident handling and disclosure to local/global authorities
• Partner with IT, production, and engineering to embed secure-by-design principles across the lifecycle
• Conduct threat modeling and security risk assessments for surgical/medical devices
• Support compliance with IT security guidance, SOX, ISO27001 & EU GDPR/NIS2
• Identify and remediate product vulnerabilities and coordinate vulnerability disclosure (CVD) processes
• Secure manufacturing environments and implement IT/OT network segmentation
• Drive enterprise-wide vulnerability management and risk-based prioritization
• Implement Zero Trust across IT and manufacturing environments
• Drive SIEM/XDR consolidation, identity platforms, and data protection tools
• Support regulatory audits and translate cybersecurity risk into business impact
• Protect sensitive data and trade secrets and monitor for exfiltration and insider threats
• Provide technical leadership and mentorship across security operations and engineering
• Collaborate with CIO, CISO, and product/engineering leadership for risk communication

Skills

SIEM/XDR

Threat modelling

Zero Trust

Regulatory compliance

Incident response

Education

Bachelor’s degree in Cybersecurity or related field

Tools

SIEM/XDR platforms

Cloud security

Job description

CONMED Corporation is seeking a Lead Information Security Engineer to safeguard our medical devices, production IT, and enterprise systems. The role emphasizes secure-by-design practices, threat modeling, and risk-based vulnerability management across the device lifecycle.

You will lead SOC operations, coordinate vulnerability disclosure, and ensure compliance with SOX, ISO 27001, and GDPR/NIS2. A remote working arrangement is available, with competitive compensation and extensive benefits.