R&D Cyber Security Engineer - IN MACH - India Development Centre

Hitachi Energy; Chennai District; On-site; INR 1,400,000 - 2,200,000; Full time

Job summary

Hitachi Energy in Chennai is expanding its R&D cybersecurity team to secure the MACH platform across its lifecycle. The role contributes to integrating cybersecurity into product design, performing risk assessments, and threat modeling to mitigate risks.

Ideal candidates have 4–8 years in cybersecurity, strong SDL knowledge, and hands-on testing experience, with familiarity in IEC 62443 and industrial control system security practices.

Qualifications

• Bachelor's or Master’s degree in Engineering.
• Min 4–8 years of cybersecurity experience.
• Strong understanding of secure product development and SDL.
• Solid knowledge of cybersecurity principles (confidentiality, integrity, availability).
• Good networking fundamentals (TCP/IP).
• Experience with risk assessment methodologies.
• Expertise in threat modeling techniques (STRIDE, MITRE EMBERD).
• Familiarity with industrial cybersecurity standards (IEC 62443).
• Hands-on cybersecurity testing and validation methods.
• Knowledge of system and application hardening best practices.

Responsibilities

• Be part of the cybersecurity team securing the MACH platform.
• Drive secure product development across the full lifecycle.
• Integrate cybersecurity into product design and development processes.
• Conduct risk assessments to identify and mitigate risks.
• Perform threat modeling to identify vulnerabilities.
• Handle vulnerabilities identified during the lifecycle.
• Ensure compliance with standards (IEC 62443, NERC-CIP, CRA).
• Plan and execute cybersecurity assurance and validation activities.
• Embed security into product architecture with cross-functional teams.

Skills

Secure SDLC

Threat modeling (STRIDE)

Risk assessment

Industrial cybersecurity

Networking fundamentals (TCP/IP)

Vulnerability testing

Security tooling

Education

Bachelor's/Master's in Engineering

Tools

Antivirus

IDS/IPS

Logging & Monitoring

Application control

Job description

Hitachi Energy, in Chennai location, is looking to expand the R&D teams, with engineers and managers, who can take the technology to the next level. IN-MACH, Chennai, India is one of the R&D centers globally, for MACHperforming Software Development, Testing and Cybersecurity activities. The below position is for the Chennai, India location.

How youll make an impact:

• You will be part of the cybersecurity team responsible for securing the MACH.
• Core responsibilities include driving secure Product development across the full product lifecycle by performing various activities mentioned below
• Integrate cybersecurity practices into product design and development processes.
• Conduct risk assessments to identify, evaluate, and mitigate security risks.
• Perform threat modeling to analyze potential attack vectors and vulnerabilities.
• Handle Vulnerabilities identified during the life cycle of the product.
• Ensure compliance with relevant cybersecurity standards (IEC 62443, Nerc-Cip, CRA, etc)
• Plan and execute cybersecurity assurance and validation activities.
• Implement system and product hardening using CIS Benchmark
• Evaluate and recommend cybersecurity solutions like Antivirus, application control, logging and monitoring, Intrusion detection, etc by assessing the compatibility of security tools with control system.
• Ensure cybersecurity solutions do not impact system performance, availability and reliability.
• Collaborate with cross-functional teams to embed security into product architecture.

Your background:

• Bachelor or Post graduate degree in Engineering.
• Min 4- 8 years of experience in cybersecurity.
• Strong understanding of secure product development and Secure Development Lifecycle (SDL)
• Solid knowledge of cybersecurity principles (confidentiality, integrity, availability)
• Good Knowledge in Networking fundamentals including TCP/IP Model.
• Experience in risk assessment and risk management methodologies
• Expertise in threat modeling techniques (e.g., STRIDE, MITRE EMB3D)
• Good understanding of Industrial cybersecurity standards (e.g., IEC 62443)
• Hands-on experience with cybersecurity testing and validation methods
• Knowledge of system and application hardening best practices
• Familiarity with security tools and technologies, including Antivirus, Application control, Logging and Monitoring, Intrusion detection system, etc.
• Understanding of OT (Operational Technology) / Industrial Control Systems (ICS) security
• Ability to evaluate security solutions for performance, reliability, and compatibility.
• Strong analytical and problem-solving skills for identifying vulnerabilities and risks.
• Experience collaborating with cross-functional teams (engineering, QA, product teams)
• Effective communication skills to translate cybersecurity concepts into actionable guidance.