Cybersecurity Engineer - Digital Services (Secure-by-Design)

Hitachi, Ltd.; Kraków; On-site; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Private medical care

Life insurance

Wellness programs

Benefits platform access

PPK (Employee Capital Plans)

Home office equipment

Eye care allowance

Team-building activities

Psychological support

Free parking

Job summary

Hitachi Energy's Service R&D unit seeks a cybersecurity professional to embed security into digital service development and operations across the HMAX Energy platform. You will define cybersecurity requirements, provide oversight during development, collaborate with central cybersecurity and product teams, and guide mitigation actions for identified risks in an industrial/cloud context.

This role requires 8+ years in product security within the energy sector.

Qualifications

• 8+ yrs of experience in product security roles in the energy sector or a related field.
• MSc / PhD degree in cyber security, Computer Science, Software Engineering, Electrical/Computer Engineering, or a comparable field.
• Solid understanding of cybersecurity topics relevant to industrial / OT-connected and cloud-connected solutions, and the ability to guide teams on security weaknesses and mitigations.
• Familiarity with widely used industrial cybersecurity standards and governance expectations — particularly the IEC 62443 family, ISO 27001, NERC CIP, and IEC 62351.
• Working knowledge of secure development lifecycle (SDLC) / security-by-design practices and how to embed them into development workflows.
• Certifications / formal training (preferred): IEC 62443 training.
• ISO 27001 Lead Auditor/Lead Implementer (or equivalent experience).
• CISSP, CISM, CCSP, GICSP, or equivalent.

Responsibilities

• Define and maintain cybersecurity requirements, principles, and guardrails for BU Service digital solutions, including HMAX Energy‑related developments.
• Provide cybersecurity oversight during the development of digital services, ensuring security‑by‑design is applied early and consistently.
• Collaborate closely with the BU Service Cybersecurity Lead and central cybersecurity function to ensure alignment with our Cybersecurity Strategy, policies, standards, and regulatory requirements.
• Support product teams in identifying cybersecurity risks, translating them into practical mitigation actions, and tracking them to resolution.
• Act as a cybersecurity point of contact for Service R&D, connecting upstream research outcomes with downstream service and operational needs.

Skills

Secure SDLC

Security-by-design

Industrial OT security

Regulatory & standards awareness

Vulnerability assessment

Education

MSc/PhD in cyber security or related field

ISO 27001 Lead Auditor/Lead Implementer

CISSP / CISM / CCSP / GICSP

IEC 62443 training or equivalent

Tools

IEC 62443 training

ISO 27001 knowledge

NERC CIP familiarity

Job description

Hitachi Energy's Service R&D unit seeks a cybersecurity professional to embed security into digital service development and operations across the HMAX Energy platform. You will define cybersecurity requirements, provide oversight during development, collaborate with central cybersecurity and product teams, and guide mitigation actions for identified risks in an industrial/cloud context.

This role requires 8+ years in product security within the energy sector.