Business R&D Senior Professional - Cybersecurity

Identification, exploration and implementation of technology / product development and growth strategies to enhance and secure global product positioning. Ensure project execution, foster innovation and develop and secure R&D capabilities in the business for profitability. Devising research methods, focus on future technical direction, future scenarios in transforming technology landscape. Preparing technical specifications and specifying laboratory test equipment and processes. Making recommendations concerning acquisition and use of new technological equipment and materials within budgets and targets set. Coordinating pilot runs on new products or processes.

This role is responsible for driving end-to-end product cyber security compliance and secure product development by ensuring adherence to Hitachi Energy cyber security requirements, customer standards, and IEC 62443 (4-1, 4-2, and 3-3) standards.

The position owns and continuously improves the Secure Development Lifecycle (SDLC), translates cyber security requirements into product capabilities, develops security architecture and design solutions, conducts threat modeling, risk assessments, vulnerability management, and release security clearances, while ensuring compliance with evolving regulations such as the EU Cyber Resilience Act (CRA).

The role also leads implementation of security controls including RBAC, secure protocols, hardening, firewalls, routers, gateways, and data protection mechanisms, collaborates across product, platform, assurance, and vendor teams, supports customer deployments and incident response activities, and acts as the primary cyber security interface throughout the product lifecycle from requirements engineering to release qualification and operational support.

Bachelor’s degree in engineering in electronics or computer science. Cybersecurity Certifications shall be an added advantage.

·   At least 7+ years of experience in cyber security related to industrial control system design and development, preferably in power industry.

·       SDLC Experience in the domain of cybersecurity, secure data communication, network security and compliances in Energy industries and associated systems according to IEC 62443 cyber security standard, EU CRA guidelines, and industry best practices for building highly resilient hardened software systems

·       Strong Knowledge of Industrial control system, SCADA Systems, Communication Gateways, Network architecture, System administration, Infrastructure (servers, workstation, switches, routers, firewalls) configuration, troubleshooting and root cause analysis.