Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 28 hours ago

Product Cybersecurity Specialist

Hexagon Mining, Inc.31 open roles

Where
Tucson, AZ, US
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowProduct Cybersecurity SpecialistHexagon Mining, Inc. · Tucson, AZ, US

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Hexagon Mining, Inc.'s own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.8% of postings close within 7 days. Measured by our own scanner across the market. Hexagon Mining, Inc. postings stay open a median of 5 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.5%3 days
  3. 12.8%7 days
  4. 20.6%14 days
  5. 35.6%30 days
  6. 58.4%60 days
This job: posted 28 hours ago

Hexagon Mining, Inc. median: 5 days open

The posting

The Company:

Hexagon is a global leader in digital reality solutions, combining sensor, software, and autonomous technologies. We are putting data to work to boost efficiency, productivity, quality, and safety across industrial, manufacturing, infrastructure, public sector, and mobility applications.

Our technologies are shaping the production and people-related ecosystems to become increasingly connected and autonomous — ensuring a scalable, sustainable future.

Hexagon’s Mining division solves surface and underground mine challenges with proven technologies for planning, operations, and safety.

Hexagon (Nasdaq Stockholm: HEXA B) has approximately 24,000 employees in 50 countries and net sales of approximately 5.5bn USD. Learn more at hexagon.com and follow us @HexagonAB.

Purpose of Position:

The Product Cybersecurity Specialist helps define the internal cybersecurity processes, performs product cybersecurity analysis, and works with cross functional teams to ensure that Hexagon Mining products and services meet compliance requirements as set by ISO 27001 and the Cyber Resilience Act (CRA). The role supports product cybersecurity compliance across the Mining Division.

Working within the governance framework and processes, the Specialist conducts product cybersecurity audits and assessments, collaborates with Product Development teams in the planning and development of cybersecurity plans for product development, reviews and approves work products/services from a product cybersecurity perspective, prepares audit reports, contributes to Engineering and Support & Services process development, and delivers internal training. The role provides technical guidance and leadership to Service & Support, Product, and Engineering teams and works cooperatively across Product Management, Engineering, Quality, Support & Service, Legal, and Information Security.

Major Areas of Responsibility:

Performs service and product cybersecurity analysis and activities as per internal processes to ensure our products meet all compliance requirements.

Specific Accountabilities

1. Audits and Assessments

  • Supports third party audits for product cybersecurity.
  • May conduct product cybersecurity internal audits and assessments.
  • Reviews and approves Work Products from a product cybersecurity perspective.

2. Compliance Evidence & Documentation

  • Develops cybersecurity plans for Product Management and Service & Support teams.
  • Applies and maintains product cybersecurity processes within a quality management system.
  • Establishes and maintains compliance documentation required for regulatory audits.
  • Supports technical file creation and evidence management.
  • Coordinates cybersecurity compliance reviews and readiness activities.
  • Develops product cybersecurity metrics, dashboards, and reporting.

3. Reporting

  • Prepares product cybersecurity audit reports.
  • Compiles and evaluates data to determine conformance to appropriate cybersecurity assurance levels.

4. Engineering Process Development

  • Contributes to engineering process development.
  • Supports and conducts product cybersecurity internal assessments.

5. Regulatory Compliance Support (ISO 27001 & EU CRA)

  • Applies ISO 27001 and EU Cyber Resilience Act requirements to assigned Mining products, software, cloud services, and connected systems.
  • Conducts product-level ISO 27001 and CRA applicability and gap assessments and documents the results.
  • Supports vulnerability intake, assessment, prioritization, and remediation tracking.
  • Compiles compliance evidence and supports technical file creation and evidence management for regulatory audits.
  • Contributes to the Mining Division’s input to the ISO 27001 and Hexagon CRA initiative and cross-functional working groups.

6. Vulnerability Management & Incident Response

  • Establishes product vulnerability management processes aligned with CRA requirements.
  • Coordinates vulnerability intake, assessment, prioritization, and remediation activities.
  • Leads exploitation impact assessments and cross-functional response efforts.
  • Coordinates reporting of exploited vulnerabilities and severe incidents to applicable authorities where required.
  • Defines customer communication, disclosure, and notification processes.

7. Training

  • May conduct product cybersecurity training internally as required.

8. Cross-Functionality Leadership

  • Serves as the Mining Division lead and subject matter expert for cybersecurity compliance.
  • Provides technical guidance and leadership to others.
  • Facilitates innovation through collaboration.
  • May lead and facilitate technical discussions.
  • Identifies key issues and patterns in complex situations; takes a broad perspective to problems and spots new, less obvious solutions.
  • Tailors communication of complex technical content and reasoning for the audience.
  • May set cybersecurity objectives, conduct performance evaluations, and assess employee development requirements.

Knowledge and Experience - Required:

  • -Bachelor Degree in Engineering, Computer Science or a similar discipline.
  • -3+ or more years of experience in product development with involvement in cybersecurity activities.
  • -Strong understanding of cybersecurity risk management.
  • -Experience leading and/or working with cross-functional teams/programs.
  • -Training record in internal product cybersecurity processes.
  • -Working towards a Certified Cybersecurity Engineer qualification per relevant product cybersecurity standards.

Knowledge and Experience - Desired:

  • EU Cyber Resilience Act (CRA)
  • NIS2
  • ISO 27001
  • IEC 62443
  • Secure Software Development Lifecycle (SSDLC)
  • Vulnerability Disclosure Programs
  • SBOM initiatives
  • Mining technology, SaaS, cloud platforms, or connected products.

Travel:

  • Domestic and international travel up to 10% of time.

Additional Information:

Critical Performance Factors for Success

Strong analytical and problem-solving skills. Excellent communication and writing skills with a professional and positive attitude. Technically competent to articulate facts and/or findings and make design and process recommendations. Ability to work cooperatively and productively with colleagues and cross functional teams. Ability to influence without authority and lead technical activities. Resourceful in knowing how to research problems and find information on related topics. Ability to lead.

Development Opportunities

  • Gain experience with product cybersecurity analysis.
  • Build regulatory compliance expertise through EU CRA readiness activities across the Mining portfolio.
  • Progress towards a Certified Cybersecurity Engineer qualification and, where business requirements support it, a team lead role.

Success Measures (First 12–18 Months)

  • Complete CRA applicability and gap assessments for assigned priority products.
  • Develop cybersecurity plans for assigned product development programmes.
  • Apply vulnerability monitoring and reporting processes to assigned products.
  • Produce product cybersecurity audit reports demonstrating conformance to the appropriate cybersecurity assurance levels.
  • Support SBOM and supplier security review activities.
  • Complete the internal product cybersecurity process training record and progress towards Certified Cybersecurity Engineer qualification.
  • Contribute to engineering process development and deliver internal cybersecurity training as required.

Hexagon is an Equal Opportunity Employer. We prohibit discrimination against any job applicant based on protected characteristics.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Hexagon Mining, Inc.'s own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Hexagon Mining, Inc.'s form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Hexagon Mining, Inc.'s answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.