R&D Product Security Engineer - Digital Service Solutions

Hitachi Energy; Kraków; On-site; PLN 240,000 - 360,000; Full time

Benefits offered by this job

Private medical care

Fitness programs

PPK

WFH equipment

Spectacles allowance

Company events

Psychological support

Free parking

Job summary

Hitachi Energy is seeking a Product Security Engineer for BU Service R&D in Krakow to embed cybersecurity into digital service development and operations.

You will influence security by design across the portfolio, guiding teams on risks and mitigations while collaborating with central cybersecurity and service leads.

Qualifications

• 8+ years in product security roles in energy or related field.
• MSc or PhD in cyber security, CS, software/engineeering, or related.
• Experience with industrial OT security and cloud-enabled solutions.
• Familiarity with IEC 62443, ISO 27001, NERC CIP and related governance.
• Knowledge of secure development lifecycle and security-by-design practices.

Responsibilities

• Define and maintain cybersecurity requirements, principles, and guardrails for BU Service digital solutions incl. HMAX Energy developments.
• Provide cybersecurity oversight during development ensuring security-by-design is applied early.
• Collaborate with Cybersecurity Lead and central cybersecurity to align with strategy and standards.
• Help product teams identify cybersecurity risks and map them to mitigations.
• Serve as cybersecurity point of contact for R&D, connecting research to service needs.

Skills

Cybersecurity

Product security

Security architecture

Industrial OT security

Cloud security

Education

MSc in Cyber Security

PhD in CS/related field

Tools

IEC 62443

ISO 27001

NERC CIP

Job description

Business Unit Service is at the forefront of delivering advanced digital service solutions worldwide. Our Service R&D team focuses on cutting-edge technologies - toinnovate in areas of serviceable assets, digital services and operations.As our digital service portfolio and HMAX Energy platform continue to grow, cybersecurity is a critical enabler for trusted, scalable, and compliant service delivery.

Join BU Service R&D to ensure that cybersecurity requirements are systematically embedded into digital service development, from early design through deployment and lifecycle operation.

How you will make an impact

As a Product Security Engineer you will ensure that products adhere to our cybersecurity standards, and you provide technical guidance across the BU Service digital portfolio, acting as a bridge between cybersecurity research, platform development, and operational service needs.

• Define and maintain cybersecurity requirements, principles, and guardrails for BU Service digital solutions, including HMAX Energy‑related developments
• Provide cybersecurity oversight during the development of digital services, ensuring security‑by‑design is applied early and consistently
• Collaborate closely with the BU Service Cybersecurity Lead and central cybersecurity function to ensure alignment with our Cybersecurity Strategy, policies, standards, and regulatory requirements
• Support product teams in identifying cybersecurity risks, translating them into practical mitigation actions, and tracking them to resolution
• Act as a cybersecurity point of contact for Service R&D, connecting upstream research outcomes with downstream service and operational needs

Yourbackground

We are looking for a cybersecurity professional who understands both secure engineering and the realities of digital service development and operations.

• Previous Experience: 8+ yrs of experience in product security roles in the energy sector or a related field
• Education:MSc / PhDdegree in cyber security,Computer Science, Software Engineering, Electrical/Computer Engineering, or a comparable field
• Industrial infrastructure security exposure:Solid understanding of cybersecurity topics relevant to industrial / OT-connected and cloud-connected solutions, and the ability to guide teams on security weaknesses and mitigations.
• Standards & compliance mindset:Familiarity with widely used industrial cybersecurity standards and governance expectations —particularlythe IEC 62443 family (e.g., secure development process and component requirements),information security management practices aligned with ISO 27001, NERC CIP and IEC 62351.
• Secure development & lifecycle practices:Working knowledge of secure development lifecycle (SDLC) / security-by-design practices and how to embed them into development workflows.
• Certifications / formal training (preferred):
• Training or demonstrated knowledge aligned to IEC 62443 (e.g., role-relevant training for service providers / maintenance service providers).
• ISO 27001 Lead Auditor/Lead Implementer (or equivalent experience).
• CISSP, CISM, CCSP, GICSP, or equivalent.

More About Us

At Hitachi Energy, we recognize that our people are at the heart of our success. We are committed to providing a supportive and inclusive workplace, competitive rewards, and opportunities for professional and personal growth. Our benefits package is designed to help employees thrive both at work and in their personal lives.

Our Benefits Offering For This Role Generally Includes

• Private medical care and life insurance
• Access to fitness and wellness programs
• Access to benefits platform with discounts and perks
• Employee Capital Plans (PPK)
• Equipment for working from home or allowances for setting up a workplace at home
• Spectacles and contact lenses allowance
• Company events and team‑building activities
• Psychological support program
• Free parking available

Add if applicable: additional benefits may apply depending on the role, grade, and business requirements.

You will receive more specific information during the recruitment process.