R&D Product Security Engineer - Digital Service Solutions

Hitachi, Ltd.; Kraków; On-site; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Private medical care

Life insurance

Wellness programs

Benefits platform access

PPK (Employee Capital Plans)

Home office equipment

Eye care allowance

Team-building activities

Psychological support

Free parking

Job summary

Hitachi Energy's Service R&D unit seeks a cybersecurity professional to embed security into digital service development and operations across the HMAX Energy platform. You will define cybersecurity requirements, provide oversight during development, collaborate with central cybersecurity and product teams, and guide mitigation actions for identified risks in an industrial/cloud context.

This role requires 8+ years in product security within the energy sector.

Qualifications

• 8+ yrs of experience in product security roles in the energy sector or a related field.
• MSc / PhD degree in cyber security, Computer Science, Software Engineering, Electrical/Computer Engineering, or a comparable field.
• Solid understanding of cybersecurity topics relevant to industrial / OT-connected and cloud-connected solutions, and the ability to guide teams on security weaknesses and mitigations.
• Familiarity with widely used industrial cybersecurity standards and governance expectations — particularly the IEC 62443 family, ISO 27001, NERC CIP, and IEC 62351.
• Working knowledge of secure development lifecycle (SDLC) / security-by-design practices and how to embed them into development workflows.
• Certifications / formal training (preferred): IEC 62443 training.
• ISO 27001 Lead Auditor/Lead Implementer (or equivalent experience).
• CISSP, CISM, CCSP, GICSP, or equivalent.

Responsibilities

• Define and maintain cybersecurity requirements, principles, and guardrails for BU Service digital solutions, including HMAX Energy‑related developments.
• Provide cybersecurity oversight during the development of digital services, ensuring security‑by‑design is applied early and consistently.
• Collaborate closely with the BU Service Cybersecurity Lead and central cybersecurity function to ensure alignment with our Cybersecurity Strategy, policies, standards, and regulatory requirements.
• Support product teams in identifying cybersecurity risks, translating them into practical mitigation actions, and tracking them to resolution.
• Act as a cybersecurity point of contact for Service R&D, connecting upstream research outcomes with downstream service and operational needs.

Skills

Secure SDLC

Security-by-design

Industrial OT security

Regulatory & standards awareness

Vulnerability assessment

Education

MSc/PhD in cyber security or related field

ISO 27001 Lead Auditor/Lead Implementer

CISSP / CISM / CCSP / GICSP

IEC 62443 training or equivalent

Tools

IEC 62443 training

ISO 27001 knowledge

NERC CIP familiarity

Job description

Business Unit Service is at the forefront of delivering advanced digital service solutions worldwide. Our Service R&D team focuses on cutting‑edge technologies - toinnovate in areas of serviceable assets, digital services and operations.As our digital service portfolio and HMAX Energy platform continue to grow, cybersecurity is a critical enabler for trusted, scalable, and compliant service delivery.
Join BU Service R&D to ensure that cybersecurity requirements are systematically embedded into digital service development, from early design through deployment and lifecycle operation.

How you will make an impact

• Define and maintain cybersecurity requirements, principles, and guardrails for BU Service digital solutions, including HMAX Energy‑related developments

• Provide cybersecurity oversight during the development of digital services, ensuring security‑by‑design is applied early and consistently

• Collaborate closely with the BU Service Cybersecurity Lead and central cybersecurity function to ensure alignment with our Cybersecurity Strategy, policies, standards, and regulatory requirements

• Support product teams in identifying cybersecurity risks, translating them into practical mitigation actions, and tracking them to resolution

• Act as a cybersecurity point of contact for Service R&D, connecting upstream research outcomes with downstream service and operational needs

Yourbackground

We are looking for a cybersecurity professional who understands both secure engineering and the realities of digital service development and operations.

• Previous Experience: 8+ yrs of experience in product security roles in the energy sector or a related field

• Education: MSc / PhD degree in cyber security, Computer Science, Software Engineering, Electrical/Computer Engineering, or a comparable field

• Industrial infrastructure security exposure: Solid understanding of cybersecurity topics relevant to industrial / OT-connected and cloud-connected solutions, and the ability to guide teams on security weaknesses and mitigations.

• Standards & compliance mindset: Familiarity with widely used industrial cybersecurity standards and governance expectations —particularlythe IEC 62443 family (e.g., secure development process and component requirements), information security management practices aligned with ISO 27001, NERC CIP and IEC 62351.

• Secure development & lifecycle practices: Working knowledge of secure development lifecycle (SDLC) / security-by-design practices and how to embed them into development workflows.

• Certifications / formal training (preferred):

• Training or demonstrated knowledge aligned to IEC 62443 (e.g., role-relevant training for service providers / maintenance service providers).

• ISO 27001 Lead Auditor/Lead Implementer (or equivalent experience).

• CISSP, CISM, CCSP, GICSP, or equivalent.

More about us

At Hitachi Energy, we recognize that our people are at the heart of our success. We are committed to providing a supportive and inclusive workplace, competitive rewards, and opportunities for professional and personal growth. Our benefits package is designed to help employees thrive both at work and in their personal lives.

Our benefits offering for this role generally includes:

• Private medical care and life insurance

• Access to fitness and wellness programs

• Access to benefits platform with discounts and perks

• Employee Capital Plans (PPK)

• Equipment for working from home or allowances for setting up a workplace at home

• Spectacles and contact lenses allowance

• Company events and team‑building activities

• Psychological support program

• Free parking available

Add if applicable: additional benefits may apply depending on the role, grade, and business requirements.

You will receive more specific information during the recruitment process.