Cyber Security Engineer
First seen by Alion on Sep 28, 2026.
Role Overview :
Cyber security and contribute towards global R&D projects.
Your Responsibilities :
- Ensure products are meeting Hitachi Energy minimum cyber security requirements or if customer specific or respective standards such as IEC 62443-3-3 or IEC 62443-4-2.
- Own, enforce, and continuously improve the security development lifecycle process according to IEC 62443-4-1 standard.
- Prepare and conduct review to ensure compliance to the SDLC as well as security architecture and design as part of product requirement engineering and customer solution development phases.
- Prepare security architecture and design documents in response to requirements specifications, develop associated user stories, and drive them through product development lifecycle.
- Translation of Cyber Requirements from Standards, Design aspects and implement within the Product capability during SDLC (RBAC setup, User GPO, Syslog, Secure Protocols etc.).
- Own risk identification activities for the product, ensuring the appropriate use of Cyber Security tools and alignment with EU CRA requirements.
- Driving Secure Development Lifecycle process compliance in product.
- Interface between product team and other functions like Platform Teams and extended stakeholders.
- Conduct and document threat modeling and attack surface analysis for product releases.
- Cyber security implementation activities (e.g., whitelisting, hardening, secure configuration and management of network switches and firewalls etc.).
- Develop, implement, and configure security controls and solutions (e.g., Routers, Gateways, L3 and L7 firewalls) concluded with respective quality assurance and user acceptance testing activities.
Experience :
- At least 8 - 10 years of experience in cyber security related to industrial control system design and software development, preferably in power industry.
Specific skills and Knowledge :
- Strong Knowledge of Industrial control system, SCADA Systems, Communication Gateways, Network architecture, System administration, Infrastructure (servers, workstation, switches, routers, firewalls) configuration, troubleshooting, and root cause analysis.
- Experience in the domain of security of the communication in industries and systems according to the standards IEC 62443 cyber security standard, EU CRA guidelines, and best practices for building highly resilient hardened software systems (e.g., NIST, CIS, and OWASP).
- Experience with industrial data transfer protocols such as Modbus, DNP3, IEC101/104, IEC 61850 and OPC UA and similar is an advantage.
- Experience in agile security development lifecycle processes and software development processes.
- Experience with static code analysis, open-source software scanning, software composition analysis would be an advantage.
- Ability to work independently with a sense of ownership and responsibility.
- A self-motivated, structured and results-oriented approach, with good time management skills and a drive to succeed.
Skills
Cyber Security, SCADA, IT Controls, IT Security Strategy, Security