R&D Product Security Engineer - Digital Service Solutions

Business Unit Service focuses on delivering advanced digital service solutions worldwide, with a Service R&D team innovating in serviceable assets, digital services, and operations. The cybersecurity function is essential for trusted, scalable, and compliant service delivery in their expanding digital service portfolio and the HMAX Energy platform.

• 8+ years of experience in product security roles in the energy sector or a related field.
• MSc or PhD degree in cybersecurity, computer science, software engineering, electrical/computer engineering, or comparable field.
• Solid understanding of cybersecurity topics relevant to industrial/OT-connected and cloud-connected solutions.
• Familiarity with industrial cybersecurity standards and governance, particularly IEC 62443 family, ISO 27001, NERC CIP, and IEC 62351.
• Working knowledge of secure development lifecycle (SDLC) and security-by-design practices.
• Preferred certifications or formal training, including IEC 62443-aligned training, ISO 27001 Lead Auditor/Lead Implementer, CISSP, CISM, CCSP, or GICSP.

• Ensure that products adhere to cybersecurity standards across the BU Service digital portfolio.
• Provide technical guidance bridging cybersecurity research, platform development, and operational service needs.
• Define and maintain cybersecurity requirements, principles, and guardrails for BU Service digital solutions, including HMAX Energy-related developments.
• Provide cybersecurity oversight during digital service development to ensure security-by-design is consistently applied early.
• Collaborate closely with BU Service Cybersecurity Lead and central cybersecurity function to align with cybersecurity strategy, policies, standards, and regulatory requirements.
• Support product teams in identifying cybersecurity risks, translating them into practical mitigation actions, and tracking resolution.
• Act as cybersecurity point of contact for Service R&D, connecting research outcomes with service and operational needs.