Job title

Senior Cloud and Data Security Engineer

Due to ITAR compliance, this position requires candidates to be a U.S. Citizen, Permanent Resident Alien, or Protected Individual per 8 U.S.C. 1324b(a)(3).

Job purpose

Coherent Corp. is seeking a lead Cloud and Data Security Engineer to join our dedicated Security team.This is a great opportunity to be part of the IT and security transformation journey which are in progress.Our ideal candidate will have a passion for cloud security and data privacy and a commitment to accuracy and execution. We are looking for someone with strong cloud security, application security, access management, automation and scripting, cloud (Azure/AWS) experience, good communication and analytics skills. Previous experience in coordinating projects and the ability to work cross-functionally is preferred. You will be securing the cutting-edge product and technology using various security protection and detection tools, analyze risk, document and standardize procedures, plan and implement projects.

Duties and responsibilities

• Promote a “security first” business environment and encourage solutions that enable IT and product teams to “shift left” with vulnerability identification and resolution.
• Provide operational and thought technical leadership while securing cloud applications, data, infrastructure, and business operations.
• Establish secure guidelines and deploy solutions to protect employees and customers data from accidental or willful alteration, destruction, or leaks.
• Implement data encryption while transferring, storing, and handling data.
• Implement and maintain a data classification system/process, and labeling
• Perform analysis and develop metrics that measure current risk and effectively evaluate and manage threats.
• Configuration management, review, and governance of Cloud resources, identity and access management (IAM), etc.
• Automating our operational processes as needed, with accuracy and in compliance with our Cyber Security standards
• Review and remediate, with appropriate teams, all issues found in security auditing reports.
• Provide best practice standards and implementation assistance to ensure a secure transition whether multi-cloud, hybrid on prem or other solution

Qualifications

• College degree (BA/BS) with several year work experience that provides knowledge of and exposure to fundamental theories, principles and practices for secure data management
• 5 years plus of cybersecurity experience with 3 years of cloud security experience.
• Proven experience with data security in both on-prem datacenter and hybrid cloud environment
• Knowledge of computer forensic tools, data loss prevention methods, and disaster recovery methods.
• Experience in penetration testing and security validation using software security testing tools
• Experience in incident response and recovery
• Professional certifications such as CEH, CISSP, CSP is preferred
• AWS Certified Security or Azure security– Specialty certification
• Experience with vulnerability management and application penetration testing systems, tools, practices, and procedures
• Experience in security frameworks, such as ISO/IEC 27001, NIST 800-53 or OWASP
• Experience host hardening, auditing, logging and monitoring, network security, SEIM deployments, IAM, DLP, security analytics, anomaly detections, PKI

Ideally, a job description should be reviewed annually and updated as often as necessary.

Culture Commitment

Ensure adherence to company’s values (ICARE) in all aspects of your position at II-VI:

Integrity – Create an Environment of Trust

Collaboration – Innovate Through the Sharing of Ideas

Accountability – Own the Process and the Outcome

Respect – Recognize the Value in Everyone

Enthusiasm – Find a Sense of Purpose in Work

II-VI is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.