> Markdown version of [/jobs/ext/3052514-operational-technology-ot-cyber-defense-analyst](https://www.wearedevelopers.com/jobs/ext/3052514-operational-technology-ot-cyber-defense-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Operational Technology (OT) Cyber Defense Analyst - **Company:** Dow - **Location:** Houston, TX, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Cyber Security, Supervisory Control and Data Acquisition (SCADA), Intrusion Detection and Prevention, Security Information and Event Management, Mitre Att&ck, Cyber Threat Analysis, Cybercrime, Process Control Systems, Operational Systems, Cyber Warfare - **Published:** September 24, 2026 - **Apply:** https://www.houstonjobsite.com/job.asp?id=3402967683&tx=JL4943FFF&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54 ## About the Role * A minimum of a bachelor's degree or relevant military experience at or above a U.S. E5 ranking or Canadian Petty Officer 2nd Class or Sergeant OR 5 years relevant experience in lieu of a Bachelor's degree. * Minimum of 3 years relevant experience. * Deep knowledge of OT and ICS technologies, including process control systems, distributed control systems (DCS), programmable logic controllers (PLC), SCADA environments, industrial networks, and manufacturing operations. * Strong understanding of, or demonstrated ability to quickly develop expertise in, OT attack surfaces, risk vectors, and cyber threats affecting industrial environments. * Experience with security operations, incident response, threat hunting, forensic investigations, or cybersecurity monitoring is preferred. * Ability to analyze complex technical information and communicate risks and recommendations effectively to both technical and business stakeholders. * A minimum requirement for this U.S. based position is the ability to work legally in the United States. No visa sponsorship/support is available for this position, including for any type of U.S. permanent residency (green card) process. Skills * Operational Technology (OT) & Industrial Control Systems (ICS) Expertise: Deep understanding of DCS, PLC, SCADA, industrial networks, process control systems, and manufacturing operations, including how cyber threats impact industrial environments. * Cyber Defense & Incident Response: Ability to detect, investigate, contain, and respond to cybersecurity incidents through threat hunting, forensic analysis, root cause investigation, and response coordination. * OT Cyber Risk Management: Knowledge of OT attack surfaces, vulnerabilities, threat vectors, and industrial cybersecurity risks, with the ability to assess and prioritize remediation actions. * Security Monitoring & Detection Engineering: Experience developing detection use cases, security analytics, SIEM monitoring, threat detection content, and OT-focused cyber monitoring capabilities. * Critical Thinking & Problem Solving: Ability to analyze complex technical issues, identify root causes, make sound decisions, and communicate risks and recommendations to technical and business stakeholders. ## Description Dow has an opportunity for an Operational Technology (OT) Cyber Defense Specialist located in Midland, MI or Houston, TX . The Dow Cyber Security Operations Center (CSOC) is seeking an experienced Operational Technology (OT) cybersecurity professional to help protect Dow's global manufacturing environment. As Dow continues to mature its OT security capabilities, this role will play a critical part in advancing our ability to detect, investigate, and respond to cyber threats targeting industrial control systems and manufacturing operations. The ideal candidate combines deep OT engineering experience with a passion for or strong interest in cybersecurity and defending critical manufacturing environments. They will possess a strong understanding of manufacturing technologies, industrial processes, and operational environments while serving as a subject matter expert within the CSOC., * Serve as a team subject matter expert for OT, providing guidance on industrial control systems, manufacturing technologies, OT networks, and associated cyber risks. * Lead the development and enhancement of OT-focused detection use cases, analytics, and monitoring capabilities utilizing frameworks such as MITRE ATT&CK for ICS. * Conduct advanced investigations of security events and incidents affecting OT and enterprise environments, including threat hunting, forensic analysis, root cause determination, and response coordination. * Continuously evaluate emerging threats, vulnerabilities, adversary tactics, and industry trends impacting industrial environments, translating intelligence into actionable defensive capabilities. * Develop and maintain detection content, playbooks, response procedures, and operational guidance for OT cybersecurity monitoring and incident response. * Contribute to cross-functional cybersecurity projects that improve Dow's overall OT security posture and cyber resilience. * Provide mentorship and guidance to other analysts, helping develop OT expertise across the CSOC., * While this position maintains a primary focus on Operational Technology cybersecurity, the successful candidate will operate as a senior Cyber Defense analyst within the broader CSOC and contribute to enterprise cyber defense operations when OT-specific support is not required. The Dow CSOC is willing to train the right candidate on cyber defense investigations and related cybersecurity disciplines if specific technical cyber defense skills need to be developed. The successful candidate will play a key role in strengthening Dow's overall detection and response capabilities across both manufacturing and enterprise environments. ## Related Videos - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) - [From Cloud Racks to Control Cabinets: Operating Kubernetes on Edge Devices](https://www.wearedevelopers.com/videos/100160-from-cloud-racks-to-control-cabinets-operating-kubernetes-on-edge-devices) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Now is the time for industrialized software development](https://www.wearedevelopers.com/magazine/601-now-is-the-time-for-industrialized-software-development) - [DevOps Engineer Salary [2023]](https://www.wearedevelopers.com/magazine/203-devops-engineer-salary-2023)