Principal OT Cybersecurity Engineer

About the role

Hitachi Rail is looking for a Principal OT Cybersecurity Engineer in Brisbane, Queensland, working full time and onsite. The role leads and executes high-complexity cybersecurity engineering tasks, coordinates technical projects, ensures compliance with international standards (IEC 62443, CLC/TS 50701, NIST, ISO 27001) and supports integration, validation and assurance of cybersecurity controls across OT and railway subsystems. It bridges architecture, engineering and technical project management, supporting the Cybersecurity Manager while guiding and mentoring Cybersecurity Specialists.

Key responsibilities

• Act as the senior technical reference for engineering teams and suppliers, approving security solutions, architectures and design proposals, and validating compliance with IEC 62443-3-3, 4-1 and 4-2.
• Guide secure system architecture, zoning and segmentation, OT protocol security and secure integration of critical systems.
• Lead development of system security requirements, zones and conduits, network and security architecture, secure configuration baselines, security integration plans for signalling, telecom, SCADA and control systems, and assess vendor solutions.
• Contribute to risk assessment, implementation and integration of cybersecurity technologies, testing, validation and acceptance.
• Manage technical projects, including documentation, reviews and stakeholder interaction.

Required profile

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Systems Engineering or a related STEM discipline; Master's degree preferred.
• 6-10 years of cybersecurity engineering experience in OT/ICS environments, transportation, energy, utilities or other critical infrastructure.
• Hands-on experience implementing, validating and troubleshooting OT security solutions, and experience leading technical project management.
• Experience in railway, metro, high-speed line or transportation systems.
• Knowledge of local regulations and cybersecurity frameworks (e.g. NIST, ENISA, APAC critical infrastructure frameworks).

Required skills

• IEC 62443 (required)
• CLC/TS 50701 (required for railway deployments)
• NIST 800-82 / 800-53, ISO 27001 / ISO 27005
• SOC integration and operational handover, cloud or hybrid architecture for operational environments

What we offer

• Annual performance, development and salary review.
• Ongoing professional development and training, and salary continuance.
• Health and wellbeing initiatives, including flu vaccinations, and an Employee Assistance Program.
• Company-sponsored days off each year, plus social events.