Cybersecurity Engineer - DevSecOps

At Dow, we believe in putting people first and we’re passionate about delivering integrity, respect and safety to our customers, our employees and the planet.

Our people are at the heart of our solutions. They reflect the communities we live in and the world where we do business. Their diversity is our strength. We’re a community of relentless problem solvers that offers the daily opportunity to contribute with your perspective, transform industries and shape the future. Our purpose is simple - to deliver a sustainable future for the world through science and collaboration.

If you’re looking for a challenge and meaningful role, you’re in the right place.

Dow has an exciting opportunity for a Cybersecurity Engineer located in Midland, MI or Houston, TX
.

This role:

• Applies expanded conceptual and practical knowledge of Information Technology and cybersecurity towards developing a world‑class cyber program.
• Focuses on information security innovation and threat monitoring within the Information Technology environment at Dow.
• Uses prescribed guidelines or policies in analyzing situations and receives a moderate level of guidance and direction.
• Provides informal guidance to new team members.
• Analyzes possible solutions using technical experience, judgment, and precedents to solve problems.

In this role, you will require understanding of key business drivers for your discipline and function. You will need to be able to expand conceptual and working knowledge related to your discipline or functional area. You are expected to provide informal guidance to new team members and be able to explain complex information to others.
It is your responsibility to use technical experience, established practices, and personal judgement to analyze and resolve straightforward problems. Your performance impacts the quality of your own work and your team’s work and requires that you work within established guidelines and policies.

• Design, implement, and maintain automated security solutions to enhance threat prevention, detection, response, and remediation in Dev Ops tooling and pipelines.
• Integrate security into Dev Ops pipelines (Dev Sec Ops ), ensuring continuous security throughout code development, deployment, and operations.
• Assist global development community with securing their applications through vulnerability scanning and implementing best practices for application security.
• Collaborate with software engineers, architects, and IT staff to drive secure development and deployment processes.
• Prioritize vulnerabilities based on risk and coordinate remediation efforts with IT, Dev Ops, system owners, and application teams.
• Provide support and resolution for remediation issues and validate post-remediation effectiveness.
• Communicate risks and recommend cost‑effective security controls to business stakeholders.
• Contribute to general cyber engineering initiatives, including network security, system hardening, and incident response.
• Develop and maintain dashboards and metrics to track vulnerability trends and remediation progress in the Dev Sec Ops  areas globally.
• Lead guidance and training on secure configurations and best practices.
• Stay current with emerging threats, automation tools, and industry trends to continually improve security operations.

• A minimum of a bachelor’s degree or relevant military experience at or above a U.S. E5 ranking or Canadian Petty Officer 2nd Class or Sergeant or 8+ years of experience in lieu of a bachelor’s degree
• Minimum 7 years of relevant experience related to Cybersecurity
• Proven experience in cybersecurity engineering, with strong knowledge of automation and Dev Sec Ops  methodologies.
• Expertise in application security, vulnerability management, and secure coding practices.
• Hands‑on experience with security tools, scripting languages, and cloud environments.
• Excellent communication and collaboration skills.
• Strong understanding of vulnerability management frameworks and tools.
• Relevant certifications (e.g., CISSP, CEH, OSCP, CompTIA Security+) are a plus.
• A minimum requirement for this U.S. based position is the ability to work legally in the United States.…