OT Cyber Defense Analyst — Industrial Control Security

Dow; Midland (MI); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Equitable base pay and bonus

Stock purchase program

Retirement savings program

Wellbeing & health benefits

Employee discounts

On-site fitness facilities

Volunteer & ERG support

Job summary

Dow is seeking an OT Cyber Defense Specialist to protect its global industrial environment from cyber threats. The role combines OT engineering with cybersecurity to detect, investigate and respond to incidents affecting ICS and manufacturing operations.

The ideal candidate has strong OT/ICS knowledge, hands-on security operations experience, and the ability to communicate risks to technical and business stakeholders. This senior role supports Dow's CSOC and broader cyber resilience efforts.

Qualifications

• Bachelor’s degree or relevant military experience at or above U.S. E5 ranking or Canadian Petty Officer 2nd Class or Sergeant, or 5 years relevant experience in lieu of a Bachelor’s degree.
• Minimum of 3 years relevant OT/ICS experience.
• Deep knowledge of OT/ICS technologies (DCS, PLC, SCADA, industrial networks).
• Experience with security operations, incident response, threat hunting or monitoring preferred.

Responsibilities

• Serve as SME for OT/ICS, guiding on industrial control systems and OT networks.
• Develop OT-focused detection use cases and monitoring capabilities.
• Investigate security events affecting OT and enterprise environments; conduct threat hunting and root-cause analysis.
• Evaluate emerging threats and translate intelligence into defensive actions.
• Develop detection content, playbooks, and response procedures for OT security.

Skills

OT/ICS Expertise

Cyber Defense

OT Risk Management

Detection Engineering

Threat Hunting

Incident Response

Education

Bachelor’s degree or military exp

Tools

MITRE ATT&CK for ICS

Job description

Dow is seeking an OT Cyber Defense Specialist to protect its global industrial environment from cyber threats. The role combines OT engineering with cybersecurity to detect, investigate and respond to incidents affecting ICS and manufacturing operations.

The ideal candidate has strong OT/ICS knowledge, hands-on security operations experience, and the ability to communicate risks to technical and business stakeholders. This senior role supports Dow's CSOC and broader cyber resilience efforts.