Senior IT/OT Cyber Security Engineer

The opportunity

Identification, exploration and implementation of technology / product development and growth strategies to enhance and secure global positioning. Ensure project execution, fosterinnovationand develop and secure R&D capabilities in the business for profitability. 

Devising research methods,focuson future technical direction, futurescenarios in transforming technology landscape.Preparing technical specifications and specifying laboratory test equipment and processes.Making recommendations concerning acquisition and use of new technological equipment and materials within budgets and targets set. Mayparticipatein intellectual property evaluations and development of patent applications. Coordinating pilot-plant or initial production runs on new products or processes. A Senior Professional (P3) applies advanced knowledge of jobareatypically obtained through advanced education and work experience. Responsibilities mayinclude:Managing projects / processes, working independently with limited supervision. Coaching and reviewing the work oflower levelprofessionals. Problems faced are difficult and sometimes complex.

Be part of theGI MACH organizationin HVDC, Hitachi Energy, Ludvika, Sweden.The HVDCtechnology has been on the market for the past 60 years and is an enabler for renewable energy integration,supportfuturesenergy transition for a sustainable future.

Elevate your career by securing IT/OT infrastructure, implementingcutting-edgecybersecurity standards, and collaborating on the forefront of HVDC technology. Be the go-to expert, driving excellence in cybersecurity for groundbreaking projects.

How you´ll make an impact:

• Identify, test, configure, and harden IT/OT infrastructure for HVDC control and protection systems, including operating systems, firmware, servers, networking devices, gateways, and firewalls.

• Implement and ensure compliance with industrial cybersecurity standards and regulations such as NIS/NIS2, NERC CIP, BDEW, FISMA, and IEC 62443, driving continuous improvement of the overall security posture.

• Act as thego‑tocybersecurity expert for projects,providingguidance,supportinggate reviews, andensuringcybersecurity requirements are met throughout the lifecycle.

• Drive release and clearance activities including CSAC,code‑signingcertifications, security testing, vulnerability mitigation, and product hardening prior to release.

• Develop, implement, andmaintainsecurity policies, procedures, technical documentation, and reports, while supporting customer interactions and Factory Acceptance Tests.

• Implement andmaintainhost‑basedandnetwork‑basedsecurity solutions such as antivirus, IDS/IPS, whitelisting, backup strategies, andthird‑partypatch validation.

• Design, implement, and support identity and infrastructure services including Active Directory, group policies, virtualization, redundant networks, intrusion detection, andhigh‑availabilitysolutions.

• Develop automation scripts using PowerShell, Python, and similar tools, support MACH Software Operations as Product Security Engineer whenrequired, and act in line with Hitachi Energy’s core values of safety and integrity.

Your Background:

• Bachelor’s or master’sdegree in a relevant technical discipline, with valid work authorization to work for Hitachi Energy in the United States.

• Strong knowledge of security principles such as defense in depth, least privilege, default deny, compartmentalization, privileged access, androle‑basedaccess control.

• Solid understanding of core cybersecurity controls including system hardening, security policies, malware protection, IDS/IPS (host and network), filtering, andnext‑generationfirewalls.

• Experience in networking, patch management, and industrial protocols such as DNP, MODBUS, IEC 61850, PRP, along withhands‑onknowledge of common IT protocols.

• Hands‑onexperience with Windows and virtual machine administration, Microsoft client and server operating systems (legacy to current), and Active Directory including integrations withthird‑partydevices.

• Experience with network and security technologies including firewalls, switches, redundant network designs, GPS clocks, intrusion detection, SIEM, and application control systems.

• Practical experience using security and scanning tools such as Nmap, Nessus, Wireshark, vulnerability, port, and malware scanners, with the ability to analyze and communicate results.

• Knowledge of security standards such as IEC 62443 and ISO 27001, experience with databases andhigh‑availabilitysolutions, andproficiencyin spoken and written English.

Whatweoffer: