Power conversion - Cyber security Engineer IDC

The opportunity:

We are looking for a skilled and motivated engineer to join our team of R&D Engineers. A person interested in the field of product cyber security and contribute towards global R&D projects.

How you’ll make an impact:

• Ensure products are meeting Hitachi Energy minimum cyber security requirements or if customer specific or respective standards such as IEC 62443-3-3 or IEC 62443-4-2

• Own, enforce, and continuously improve the security development lifecycle process according to IEC 62443-4-1 standard.

• Prepare security requirements documents as part of product requirement engineering and customer solution development phases.

• Prepare security architecture and design documents in response to requirements specifications, develop associated user stories, and drive them through product development lifecycle.

• Own risk identification in the product responsible for monitoring right use of CS tools.

• Driving the vulnerability process within the product team.

• Accountable for release clearance of product and evidence for the release.

• Driving Secure Development Lifecycle process compliance in product.

• Interface between product team and other functions related to CS topic.

• Conduct and document threat modeling and attack surface analysis for product releases.

• Conduct review to ensure compliance to the security development lifecycle as well as security architecture and design.

• Develop, implement, and configure security controls and solutions (e.g., L3 and L7 firewalls) concluded with respective quality assurance and user acceptance testing activities.

• Conduct security risk assessments and drive the product releases through Hitachi Energy cyber security clearance process and respective tests in close collaboration with Hitachi Energy product security officers and security assurance teams.

• Deploy and work security solutions for internal / external customer projects in on-premises and / or off-premises models.

• Function as L3/L4 support team member for security incident (e.g., vulnerabilities) management process.

• Engage with internal / external software development vendors.

• Responsible to ensure compliance with applicable external and internal regulations, procedures, and guidelines.

• Living Hitachi Energy’s core values of safety and integrity, which means taking responsibility for your own actions while caring for your colleagues and the business.

Your background:

• Bachelor’s engineering degree in electronics or computer science.

• At least 3 years of experience in cyber security related to industrial control system design and software development, preferably in power industry.

• Strong Knowledge of Industrial control system, SCADA Systems, Communication Gateways, Network architecture, System administration, Infrastructure (servers, workstation, switches, routers, firewalls) configuration, troubleshooting, and root cause analysis.

• Experience in the domain of security of the communication in industries and systems according to the standards IEC 62443 cyber security standard, guidelines, and best practices for building highly resilient hardened software systems (e.g., NIST, CIS, and OWASP).

• Experience with industrial data transfer protocols such as Modbus, DNP3, IEC101/104, IEC 61850 and OPC UA and similar is an advantage.

• Experience in agile security development lifecycle processes and software development processes.

• Experience in implementation, configuration, operation, maintenance, and troubleshooting of security controls such as L3 and L7 firewalls.

• Experience with static code analysis, dynamic code analysis, open-source software scanning, software composition analysis would be an advantage.

• Ability to work independently with a sense of ownership and responsibility.

• A self-motivated, structured and results-oriented approach, with good time management skills and a drive to succeed.

• Fluency in written and spoken as well as technical writing English.

• Communication and interpersonal skills and intercultural sensitivity.