Senior IT/OT Cyber Security Engineer

The opportunity 

Identification, exploration and implementation of technology / product development and growth strategies to enhance and secure global positioning. Ensure project execution, foster innovation and develop and secure R&D capabilities in the business for profitability.  

Devising research methods, focus on future technical direction, future scenarios in transforming technology landscape. Preparing technical specifications and specifying laboratory test equipment and processes. Making recommendations concerning acquisition and use of new technological equipment and materials within budgets and targets set. May participate in intellectual property evaluations and development of patent applications. Coordinating pilot-plant or initial production runs on new products or processes. A Senior Professional (P3) applies advanced knowledge of job area typically obtained through advanced education and work experience. Responsibilities may include: Managing projects / processes, working independently with limited supervision. Coaching and reviewing the work of lower level professionals. Problems faced are difficult and sometimes complex. 

Be part of the GI MACH organization in HVDC, Hitachi Energy, Ludvika, Sweden. The HVDC technology has been on the market for the past 60 years and is an enabler for renewable energy integration, support futures energy transition for a sustainable future. 

Elevate your career by securing IT/OT infrastructure, implementing cutting-edge cybersecurity standards, and collaborating on the forefront of HVDC technology. Be the go-to expert, driving excellence in cybersecurity for groundbreaking projects. 

How you´ll make an impact: 

• Identify, test, configure, and harden IT/OT infrastructure for HVDC control and protection systems, including operating systems, firmware, servers, networking devices, gateways, and firewalls. 

• Implement and ensure compliance with industrial cybersecurity standards and regulations such as NIS/NIS2, NERC CIP, BDEW, FISMA, and IEC 62443, driving continuous improvement of the overall security posture. 

• Act as the go‑to cybersecurity expert for projects, providing guidance, supporting gate reviews, and ensuring cybersecurity requirements are met throughout the lifecycle. 

• Drive release and clearance activities including CSAC, code‑signing certifications, security testing, vulnerability mitigation, and product hardening prior to release. 

• Develop, implement, and maintain security policies, procedures, technical documentation, and reports, while supporting customer interactions and Factory Acceptance Tests. 

• Implement and maintain host‑based and network‑based security solutions such as antivirus, IDS/IPS, whitelisting, backup strategies, and third‑party patch validation. 

• Design, implement, and support identity and infrastructure services including Active Directory, group policies, virtualization, redundant networks, intrusion detection, and high‑availability solutions. 

• Develop automation scripts using PowerShell, Python, and similar tools, support MACH Software Operations as Product Security Engineer when required, and act in line with Hitachi Energy’s core values of safety and integrity. 

Your Background: 

• Bachelor’s or master’s degree in a relevant technical discipline, with valid work authorization to work for Hitachi Energy in the United States. 

• Strong knowledge of security principles such as defense in depth, least privilege, default deny, compartmentalization, privileged access, and role‑based access control. 

• Solid understanding of core cybersecurity controls including system hardening, security policies, malware protection, IDS/IPS (host and network), filtering, and next‑generation firewalls. 

• Experience in networking, patch management, and industrial protocols such as DNP, MODBUS, IEC 61850, PRP, along with hands‑on knowledge of common IT protocols. 

• Hands‑on experience with Windows and virtual machine administration, Microsoft client and server operating systems (legacy to current), and Active Directory including integrations with third‑party devices. 

• Experience with network and security technologies including firewalls, switches, redundant network designs, GPS clocks, intrusion detection, SIEM, and application control systems. 

• Practical experience using security and scanning tools such as Nmap, Nessus, Wireshark, vulnerability, port, and malware scanners, with the ability to analyze and communicate results. 

• Knowledge of security standards such as IEC 62443 and ISO 27001, experience with databases and high‑availability solutions, and proficiency in spoken and written English. 

What we offer: