Operational Technology (OT) Cyber Defense Analyst

At Dow, we believe in putting people first and we’re passionate about delivering integrity, respect and safety to our customers, our employees and the planet.   Our people are at the heart of our solutions. They reflect the communities we live in and the world where we do business. Their diversity is our strength. We’re a community of relentless problem solvers that offers the daily opportunity to contribute with your perspective, transform industries and shape the future. Our purpose is simple - to deliver a sustainable future for the world through science and collaboration. If you’re looking for a challenge and meaningful role, you’re in the right place. About the role Dow has an opportunity for an Operational Technology (OT) Cyber Defense Specialist located in Midland, MI or Houston, TX . The Dow Cyber Security Operations Center (CSOC) is seeking an experienced Operational Technology (OT) cybersecurity professional to help protect Dow's global manufacturing environment. As Dow continues to mature its OT security capabilities, this role will play a critical part in advancing our ability to detect, investigate, and respond to cyber threats targeting industrial control systems and manufacturing operations. The ideal candidate combines deep OT engineering experience with a passion for or strong interest in cybersecurity and defending critical manufacturing environments. They will possess a strong understanding of manufacturing technologies, industrial processes, and operational environments while serving as a subject matter expert within the CSOC. Key Responsibilities Serve as a team subject matter expert for OT, providing guidance on industrial control systems, manufacturing technologies, OT networks, and associated cyber risks. Lead the development and enhancement of OT-focused detection use cases, analytics, and monitoring capabilities utilizing frameworks such as MITRE ATT&CK for ICS. Conduct advanced investigations of security events and incidents affecting OT and enterprise environments, including threat hunting, forensic analysis, root cause determination, and response coordination. Continuously evaluate emerging threats, vulnerabilities, adversary tactics, and industry trends impacting industrial environments, translating intelligence into actionable defensive capabilities. Develop and maintain detection content, playbooks, response procedures, and operational guidance for OT cybersecurity monitoring and incident response. Contribute to cross-functional cybersecurity projects that improve Dow's overall OT security posture and cyber resilience. Provide mentorship and guidance to other analysts, helping develop OT expertise across the CSOC. Qualifications A minimum of a bachelor’s degree or relevant military experience at or above a U.S. E5 ranking or Canadian Petty Officer 2nd Class or Sergeant OR 5 years relevant experience in lieu of a Bachelor’s degree. Minimum of 3 years relevant experience. Deep knowledge of OT and ICS technologies, including process control systems, distributed control systems (DCS), programmable logic controllers (PLC), SCADA environments, industrial networks, and manufacturing operations. Strong understanding of, or demonstrated ability to quickly develop expertise in, OT attack surfaces, risk vectors, and cyber threats affecting industrial environments. Experience with security operations, incident response, threat hunting, forensic investigations, or cybersecurity monitoring is preferred. Ability to analyze complex technical information and communicate risks and recommendations effectively to both technical and business stakeholders. A minimum requirement for this U.S. based position is the ability to work legally in the United States.  No visa sponsorship/support is available for this position, including for any type of U.S. permanent residency (green card) process. Skills Operational Technology (OT) & Industrial Control Systems (ICS) Expertise: Deep understanding of DCS, PLC, SCADA, industrial networks, process control systems, and manufacturing operations, including how cyber threats impact industrial environments. Cyber Defense & Incident Response: Ability to detect, investigate, contain, and respond to cybersecurity incidents through threat hunting, forensic analysis, root cause investigation, and response coordination. OT Cyber Risk Management: Knowledge of OT attack surfaces, vulnerabilities, threat vectors, and industrial cybersecurity risks, with the ability to assess and prioritize remediation actions. Security Monitoring & Detection Engineering: Experience developing detection use cases, security analytics, SIEM monitoring, threat detection content, and OT-focused cyber monitoring capabilities. Critical Thinking & Problem Solving: Ability to analyze complex technical issues, identify root causes, make sound decisions, and communicate risks and recommendations to technical and business stakeholders. Additional Role Expectations While this position maintains a primary focus on Operational Technology cybersecurity, the successful candidate will operate as a senior Cyber Defense analyst within the broader CSOC and contribute to enterprise cyber defense operations when OT-specific support is not required. The Dow CSOC is willing to train the right candidate on cyber defense investigations and related cybersecurity disciplines if specific technical cyber defense skills need to be developed. The successful candidate will play a key role in strengthening Dow's overall detection and response capabilities across both manufacturing and enterprise environments. Note: this position does not offer relocation assistance. Benefits – What Dow offers you   We invest in you.  Dow invests in total rewards programs to help you manage all aspects of you: your pay, your health, your life, your future, and your career. You bring your background, talent, and perspective to work every day. Dow rewards that commitment by in