Customer System Security Engineer – Project Engineering
Workplace: VÄSTERÅS, Sweden
Expires: July 7, 2025
Responsible for ensuring that cybersecurity requirements are met from tender to project handover, coordinating with leads to fulfill Hitachi Energy and customer security standards, assessing risks and deviations, reviewing deliverables against standards including IEC 62443-3-3, and supporting certification and documentation processes within an OT automation environment.
Main requirements:
- Bachelor’s degree
- Minimum 6+ years IT/OT industry experience in Control System Automation with at least 3 years focused on OT cybersecurity or 5+ years as OT Cyber Security Implementer/Architect
- Advanced knowledge of OT networking and network security
- Experience working with OT environment components and security
- Knowledge of cybersecurity regulations, standards, and frameworks (IEC62443, NERC–CIP, BDEW, NIST)
- Awareness of current cybersecurity controls and solutions such as Endpoint Security, AAA, Security Logging, Hardening Benchmarks
- Knowledge of security tools like NESSUS, CIS CAT, Nmap
- Understanding of computer networks and network security (firewalls, IDS)
- Desirable certifications include ISA 99 / 62443 Cybersecurity Fundamentals, GIAC, GICSP, CEH
Responsibilities:
- Manage cybersecurity requirements from tender through project handover
- Coordinate with Cyber Security Lead or Officer to meet Hitachi Energy and customer cybersecurity requirements
- Assess, identify deviations and risks related to customer requirements and standards during tender phase
- Liaise with customers regarding the adherence of automation solutions to requirements and standards
- Review and ensure cybersecurity deliverables are implemented and delivered as agreed
- Ensure project delivery compliance to IEC 62443-3-3 standard where applicable
- Support enhancement and maintenance of cybersecurity documentation for projects
- Ensure vulnerability management in delivery projects
- Support business in achieving IEC 62443 2-4 and 3-3 certifications
- Support maintenance and improvement of cybersecurity solutions
- Contribute to development and improvement of cybersecurity assurance processes in delivery projects
- Ensure test area asset security management and security tools implementation
Required hard skills:
- Cybersecurity knowledge in OT environments
- Knowledge of IEC62443, NERC–CIP, BDEW, NIST cybersecurity standards and regulations
- Experience with OT networking and network security
- Experience with vulnerability management and security tools (NESSUS, CIS CAT, Nmap)
- Understanding of firewall and intrusion detection systems
Recommended hard skills:
- Certifications such as ISA 99 / 62443 Cybersecurity Fundamentals, GIAC, GICSP, CEH
Soft skills:
- Coordination and communication skills to liaise with customers and internal teams
- Risk assessment and analytical skills
- Documentation and process improvement skills
Frameworks:
- IEC 62443
Natural languages:
- English (Proficient)
Cultural skills:
- Adaptability to multicultural environment
- Collaboration and teamwork