Operational Technology (OT) Cyber Defense Analyst

What you'd do

• Serve as a team subject matter expert for OT, providing guidance on industrial control systems, manufacturing technologies, OT networks, and associated cyber risks.
• Lead the development and enhancement of OT-focused detection use cases, analytics, and monitoring capabilities utilizing frameworks such as MITRE ATT&CK for ICS.
• Conduct advanced investigations of security events and incidents affecting OT and enterprise environments, including threat hunting, forensic analysis, root cause determination, and response coordination.
• Continuously evaluate emerging threats, vulnerabilities, adversary tactics, and industry trends impacting industrial environments, translating intelligence into actionable defensive capabilities.
• Develop and maintain detection content, playbooks, response procedures, and operational guidance for OT cybersecurity monitoring and incident response.
• Contribute to cross-functional cybersecurity projects that improve Dow's overall OT security posture and cyber resilience.
• Provide mentorship and guidance to other analysts, helping develop OT expertise across the CSOC.
• While this position maintains a primary focus on Operational Technology cybersecurity, the successful candidate will operate as a senior Cyber Defense analyst within the broader CSOC and contribute to enterprise cyber defense operations when OT-specific support is not required.
• The Dow CSOC is willing to train the right candidate on cyber defense investigations and related cybersecurity disciplines if specific technical cyber defense skills need to be developed.
• The successful candidate will play a key role in strengthening Dow's overall detection and response capabilities across both manufacturing and enterprise environments.

What they want

• A minimum of a bachelor’s degree or relevant military experience at or above a U.S. E5 ranking or Canadian Petty Officer 2nd Class or Sergeant OR 5 years relevant experience in lieu of a Bachelor’s degree.
• Minimum of 3 years relevant experience.
• Deep knowledge of OT and ICS technologies, including process control systems, distributed control systems (DCS), programmable logic controllers (PLC), SCADA environments, industrial networks, and manufacturing operations.
• Strong understanding of, or demonstrated ability to quickly develop expertise in, OT attack surfaces, risk vectors, and cyber threats affecting industrial environments.
• Experience with security operations, incident response, threat hunting, forensic investigations, or cybersecurity monitoring is preferred.
• Ability to analyze complex technical information and communicate risks and recommendations effectively to both technical and business stakeholders.
• A minimum requirement for this U.S. based position is the ability to work legally in the United States. No visa sponsorship/support is available for this position, including for any type of U.S. permanent residency (green card) process.
• Operational Technology (OT) & Industrial Control Systems (ICS) Expertise: Deep understanding of DCS, PLC, SCADA, industrial networks, process control systems, and manufacturing operations, including how cyber threats impact industrial environments.
• Cyber Defense & Incident Response: Ability to detect, investigate, contain, and respond to cybersecurity incidents through threat hunting, forensic analysis, root cause investigation, and response coordination.
• OT Cyber Risk Management: Knowledge of OT attack surfaces, vulnerabilities, threat vectors, and industrial cybersecurity risks, with the ability to assess and prioritize remediation actions.

What you get

• Equitable and market-competitive base pay and bonus opportunity across our global markets, along with locally relevant incentives.
• Benefits and programs to support your physical, mental, financial, and social well-being, to help you get the care you need...when you need it.
• Competitive retirement program that may include company-provided benefits, savings opportunities, financial planning, and educational resources to help you achieve your long term financial-goals.
• Employee stock purchase programs (availability varies depending on location).
• Student Debt Retirement Savings Match Program (U.S. only).
• Dow will take the value of monthly student debt payments and apply them as if they are contributions to the Employees’ Savings Plan (401(k)), helping employees reach the Company match.
• Robust medical and life insurance packages that offer a variety of coverage options to meet your individual needs. Travel insurance is also available in certain countries/locations.
• Opportunities to learn and grow through training and mentoring, work experiences, community involvement and team building.
• Workplace culture empowering role-based flexibility to maximize personal productivity and balance personal needs.
• Competitive yearly vacation allowance.

About Dow

Dow has an opportunity for an Operational Technology (OT) Cyber Defense Specialist located in Midland, MI or Houston, TX. The Dow Cyber Security Operations Center (CSOC) is seeking an experienced Operational Technology (OT) cybersecurity professional to help protect Dow's global manufacturing environment.