Cybersecurity Specialist

Dow•Midland, MI

About The Position

At Dow, we believe in putting people first and we’re passionate about delivering integrity, respect and safety to our customers, our employees and the planet. Our people are at the heart of our solutions. They reflect the communities we live in and the world where we do business. Their diversity is our strength. We’re a community of relentless problem solvers that offers the daily opportunity to contribute with your perspective, transform industries and shape the future. Our purpose is simple - to deliver a sustainable future for the world through science and collaboration. If you’re looking for a challenge and meaningful role, you’re in the right place. Dow (NYSE: DOW) is one of the world’s leading materials science companies, serving customers in high-growth markets such as packaging, infrastructure, mobility and consumer applications. Our global breadth, asset integration and scale, focused innovation, leading business positions and commitment to sustainability enable us to achieve profitable growth and help deliver a sustainable future. We operate manufacturing sites in 30 countries and employ approximately 36,000 people. Dow delivered sales of approximately $43 billion in 2024. References to Dow or the Company mean Dow Inc. and its subsidiaries. Learn more about us and our ambition to be the most innovative, customer-centric, inclusive and sustainable materials science company in the world by visiting www.dow.com. About the role: Dow has an exciting opportunity for a Cybersecurity Vulnerability Specialist located in Midland, MI or Houston, TX. This role is responsible for overseeing the identification, assessment, and driving remediation of security vulnerabilities across the Dow’s technology infrastructure. This role involves managing vulnerability scanning tools, coordinating with IT and security teams, and ensuring timely mitigation of risks to protect the organization’s digital assets.

Requirements

A minimum of a bachelor’s degree or relevant military experience at or above a U.S. E5 ranking or Canadian Petty Officer 2nd Class or Sergeant OR 5 years relevant experience in lieu of a Bachelor's degree.
Strong understanding of vulnerability management frameworks and tools.
Minimum of 2 years relevant experience required.
Experience in cybersecurity, vulnerability management, or incident response required.
Knowledge of common vulnerabilities and exposures (CVEs), CVSS scoring, temporal scoring and threat modeling.
Experience with patch management processes and secure system configurations.
Familiarity with operating systems (Windows, Linux), networking, and cloud environments (i.e. Azure).
Ability to interpret vulnerability scan results and communicate technical risks to non-technical stakeholders.
Strong analytical, problem-solving, and organizational skills.
Excellent communication and collaboration abilities.
A minimum requirement to work legally in the country for which you are applying.
No visa sponsorship/support is available for this position, including for any type of permanent residency (green card) process.
Risk Management: The ability to identify, assess, and prioritize risks followed by coordinated efforts to minimize, monitor, and control the probability or impact of unfortunate events.
Security Technologies: Proficiency in tools and platforms used to detect, prevent, and respond to cybersecurity threats (e.g., vulnerability scanners, endpoint protection, SIEM).
Critical Thinking: The capacity to analyze complex data, identify patterns, and make informed decisions.
Cyber Risks: Understanding of threats, vulnerabilities, and potential impacts to digital assets and infrastructure.
Written Communication: The ability to convey technical findings, risks, and recommendations clearly and concisely in written form.

Nice To Haves

Relevant certifications (e.g., CISSP, CEH, OSCP, CompTIA Security+) are a plus.

Responsibilities

Vulnerability Program Execution & Improvement Assist in planning, implementing, and continuously improving the vulnerability management program. Support automation and optimization of the vulnerability lifecycle, including data ingestion, normalization, and compliance metrics.
Assessment & Analysis Conduct regular vulnerability assessments using automated tools and manual techniques across infrastructure and applications. Review and analyze vulnerability data from various sources (e.g., internal/external scans, penetration tests) to determine risk ratings and business impact. Perform recurring and on-demand scanning of corporate and cloud environments.
Remediation & Collaboration Prioritize vulnerabilities based on risk and coordinate remediation efforts with IT, DevOps, system owners, and application teams. Provide support and resolution for remediation issues and validate post-remediation effectiveness. Communicate risks and recommend cost-effective security controls to business stakeholders.
Monitoring, Reporting & Compliance Develop and maintain dashboards and metrics to track vulnerability trends and remediation progress. Ensure scan results are appropriately reported and integrated into relevant systems. Ensure compliance with regulatory and industry standards (e.g., NIST, ISO 27001, PCI-DSS).
Knowledge Sharing & Incident Response Stay current with emerging threats, vulnerabilities, and security technologies relevant to the environment. Provide guidance and training on secure configurations and best practices. Participate in incident response activities related to exploited vulnerabilities.

Benefits

Equitable and market-competitive base pay and bonus opportunity across our global markets, along with locally relevant incentives.
Benefits and programs to support your physical, mental, financial, and social well-being, to help you get the care you need...when you need it.
Competitive retirement program that may include company-provided benefits, savings opportunities, financial planning, and educational resources to help you achieve your long term financial-goals.
Employee stock purchase programs (availability varies depending on location).
Student Debt Retirement Savings Match Program (U.S. only). Dow will take the value of monthly student debt payments and apply them as if they are contributions to the Employees’ Savings Plan (401(k)), helping employees reach the Company match.
Robust medical and life insurance packages that offer a variety of coverage options to meet your individual needs. Travel insurance is also available in certain countries/locations.
Opportunities to learn and grow through training and mentoring, work experiences, community involvement and team building.
Workplace culture empowering role-based flexibility to maximize personal productivity and balance personal needs.
Competitive yearly vacation allowance.
Paid time off for new parents (birthing and non-birthing, including adoptive and foster parents).
Paid time off to care for family members who are sick or injured.
Paid time off to support volunteering and Employee Resource Group’s (ERG) participation.
Wellbeing Portal for all Dow employees, our one-stop shop to promote wellbeing, empowering employees to take ownership of their entire wellbeing journey.
On-site fitness facilities to help stay healthy and active (availability varies depending on location).
Employee discounts for online shopping, cinema tickets, gym memberships and more.
Additionally, some of our locations might offer:
Transportation allowance (availability varies depending on location)
Meal subsidiaries/vouchers (availability varies depending on location)
Carbon-neutral transportation incentives e.g. bike to work (availability varies depending on location)