1. Ensure products are meeting Hitachi Energy minimum cyber security requirements or if customer specific or respective standards such as IEC 62443-3-3 or IEC 62443-4-2
2. Own, enforce, and continuously improve the security development lifecycle process according to IEC 62443-4-1 standard.
3. Prepare and conduct review to ensure compliance to the SDLC as well as security architecture and design as part of product requirement engineering and customer solution development phases.
4. Prepare security architecture and design documents in response to requirements specifications, develop associated user stories, and drive them through product development lifecycle.
5. Translation of Cyber Requirements from Standards, Design aspects and implement within the Product capability during SDLC (RBAC setup, User GPO, Syslog , Secure Protocols etc.)
6. Own risk identification activities for the product, ensuring the appropriate use of Cyber Security tools and alignment with EU CRA requirements.
7. Driving Secure Development Lifecycle process compliance in product. 8. Interface between product team and other functions like Platform Teams and extended stakeholders.
9. Conduct and document threat modeling and attack surface analysis for product releases.
10. Cyber security implementation activities (e.g., whitelisting, hardening, secure configuration and manage ment of network switches and firewalls etc.)
11. Develop, implement, and configure security controls and solutions (e.g., Routers, Gateways, L3 and L7firewalls) concluded with respective quality assurance and user acceptance testing activities.
12. Implement solutions and develop test cases for Cyber foundational and system requirements adhering IEC 62443 3-3 and 4-2 eg., Data protection solutions (System Integrity and Data Confidentiality etc.)
13. Conduct security risk assessments and drive the product releases through Hitachi Energy cyber security clearance process and respective tests in close collaboration with Hitachi Energy product security officers and security assurance team requirements.
14. Accountable for release clearance of product and support evidences to augment release qualification.
15. Driving the vulnerability process within the product team aligning to EU-CRA requirements.
16. Deploy and work security solutions for internal / external customer projects in on-premises and / or off premises models.
17. Function as L3/L4 support team member for security incident (e.g., vulnerabilities) management process.
18. Engage with internal / external software development vendors.
19. Living Hitachi Energy’s core values of safety and integrity, which means taking responsibility for your own actions while caring for your colleagues and the business
