Stagebank HBO-ICT

Suncom_Logo.png

Om te solliciteren op deze stage, moet je met je HvA-emailadres een account aanmaken.

account aanmaken

Bedrijfsinformatie

Suncom Energy
Zeilschip 18
3991CT
Houten
https://suncom-energy.com/nl/

OT Cybersecurity for Solar Thermal Plants (IEC 62443 & CRA)

Afstudeeropdracht — TC, SNE/CS — Houten, Utrecht
#Afstudeerstage, #Automatisering, #Digitalisering, #ICT, #cybersecurity
Gepubliceerd op 12-11-2026 16:51

Suncom Energy is a Dutch scale-up in Houten developing concentrated solar thermal plants that deliver renewable industrial heat up to 475 °C. Every plant connects to the customer's process control system, our cloud platform and our remote service. In this graduation assignment you develop the cybersecurity framework for all our plants, aligned with IEC 62443 and the EU Cyber Resilience Act.

Background

Our plants run on a PLC-based control system that we design and program ourselves, and they supply renewable heat to industrial users such as food and beverage manufacturers. Because every plant is connected to outside systems, cybersecurity is part of safe and reliable operation. The EU Cyber Resilience Act (CRA) makes it a legal duty as well: vulnerability reporting has applied since September 2026, and the full requirements apply from December 2027. Together with the OT security standard IEC 62443, it shapes how we design, build and maintain every plant.

Assignment

This assignment is for an enterprising and curious HBO-ICT student with a strong interest in cybersecurity and industrial automation. Together with our EC&I engineer, you assess the security of our plants, build the risk register and design defense-in-depth measures covering both OT and IT. You then validate these measures on our test bench. Your work feeds directly into project execution and supports compliance with IEC 62443 and the CRA by the end of 2027.

Research question

How can Suncom protect its SunFleet plants while meeting IEC 62443 and CRA security requirements?

Expected results

  • Review of the SunFleet reference architecture and asset inventory, with proposed design improvements
  • The risk method and the risk register for our standard plant
  • Zones and conduits, and a detailed risk assessment to IEC 62443-3-2
  • Target security levels, and IEC 62443 requirements mapped to the CRA essential requirements
  • A defense-in-depth design for network segmentation, remote access, and identity and access management
  • The standard Cybersecurity Protection Scheme, used as the framework for project execution
  • The key measures validated on the test bench, with recorded results

We agree the final scope with you and your school supervisor at the start, so it fits the HvA graduation period.

What we offer

  • Work in a mission-driven scale-up that is decarbonizing the world's energy supply
  • Hands-on experience with IEC 62443 and the CRA on real plants, skills the industry urgently needs
  • A flexible work environment with responsibility and ownership
  • Internship compensation of €500 per month
  • Opportunity to join the team long-term after your internship, with the possibility to become co-owner of Suncom

Practical

From February 2027, following the HvA graduation period. Houten, hybrid.

Geschikt voor studenten
  • Cyber Security
  • Technische Informatica