Security Engineer

In this role you will lead cybersecurity design and implementation for railway systems, ensuring compliance with contracts and standards. You’ll collaborate with customers and internal teams to translate requirements into secure, verifiable solutions across subsystems. You’ll drive security planning, testing, and commissioning to enable safe operation of complex rail plants. This is a chance to shape secure rail projects at scale within a global, technology-driven company.

• Analyze customer specifications and decompose them into software requirements
• Identify gaps between customer needs and Hitachi standard software or COTS products
• Develop and maintain requirement documents, high-level design, interface control documents, and traceability
• Serve as the primary technical interface to the customer and coordinate with internal departments
• Contribute to interfaces with main subsystems and security systems (e.g., SIEM)
• Develop and execute security management and commissioning plans, including resourcing and scheduling; onsite lead for commissioning
• Coordinate work sequences, schedules, resources, and punch list items
• Define and conduct testing protocols for commercial operation and ensure safe commissioning
• Provide technical support during commissioning and operation, and develop training and handoff material
• Drive continuous improvement for technical problem solving and knowledge capture
• Oversee administrative duties including service reports, issue tracking, safety and quality compliance

• Telecommunications System Architectures and Solutions
• ISO 27001 and 27005
• EN 50159
• NIST 800-53 and 800-82
• IEC 62443 family
• Backbone Transmission Systems and Elements
• IP Networking - Wired & Wireless
• System Integration knowledge
• SIEM technology experience
• Firewall Configuration and Management Knowledge
• Active Directory and Radius Configuration Management (802.1x)
• Nessus vulnerability assessment experience
• SCADA security knowledge
• Cisco CCNA/CCNA Security/CCNP (preferable)
• Experience with vulnerability assessments, penetration testing, patch and configuration management
• Fluent English

• customer focus
• communication and collaboration
• problem solving
• SIEM
• Firewall configuration
• Active Directory / Radius (802.1x)