Senior Cybersecurity Engineer, OT Cybersecurity

Marathon Petroleum Corporation • San Antonio, TX

2d

About The Position

The Senior Cybersecurity Engineer, OT Cybersecurity plays a critical role in safeguarding Marathon Petroleum Corporation’s digital and operational assets across enterprise IT and industrial control systems (ICS/OT). This position is responsible for the use, maintenance, and enhancement of the Dragos platform optimizing threat and vulnerability management to identify, analyze, and respond to emerging cyber threats targeting both business and field operations, including refineries, pipelines, terminals, and remote industrial facilities. Working as part of the Cyber Threat and Vulnerability Management team within the Cyber Fusion Center, the engineer will ensure the proper operation and use of the Dragos platform and associated field equipment across the OT enterprise environment allowing for the enhancement of TVM processes within the OT environment. The role requires close coordination with internal teams including threat hunting, incident response, threat intelligence, and infrastructure to ensure alignment between detection strategy, risk posture, and operational resiliency. The ideal candidate is technically proficient, collaborative, and mission-driven, with a strong understanding of IT/OT security principles and a passion for protecting critical infrastructure within the energy sector.

Requirements

• Bachelor’s Degree in Information Technology, related field or equivalent experience.
• 5+ years of relevant experience required
• Dragos Platform Certified User Certification required.
• Dragos ICS/OT Cybersecurity Training Certification required.

Nice To Haves

• Professional certification, e.g. Security+, Network+, OSCP, GIAC, CEH preferred.
• ICS/OT Cybersecurity certifications such as GCISP and GRID preferred.

Responsibilities

• Conducts detailed analyses on changes to cybersecurity solutions and its relationship to internal and external systems to assess business impact and cybersecurity risk.
• Resolves complex multi-functional technical issues.
• Leverages cybersecurity assessments, standards and ensures compliance across security systems.
• Improves the efficiency and effectiveness of Security solutions, processes and controls in place.
• Analyzes existing processes and procedures and leads efforts for implementing improvements or remediation.
• Responsible for development and submission of Standard Operating Procedures.
• Analyzes business impacting events, performs initial investigation.
• Monitors networks, systems, and applications for signs of potential cybersecurity incidents.
• Investigates and analyzes the nature and scope of cyber incidents.
• Assists in the development of innovative and creative ideas to formulate risk mitigation and remediation plans and approaches to ensure regulatory compliance.
• Leads implementation of global security initiatives, policies, and compliance requirements.
• Collects and validates all security metrics and any remediation efforts associated with them.
• Manages cyber security-related consulting, guidance, and support to customers and stakeholders.
• Translates security principles to assist configuration teams with incorporating security into build and configuration processes.
• Monitors emerging IT/OT and cybersecurity technologies as well as their impact on the security landscape.

Benefits

• Marathon Petroleum offers a total rewards program which includes, but is not limited to, access to health, vision, and dental insurance, paid time off, 401k matching program, paid parental leave, and educational reimbursement.
• The hired candidate will also be eligible for a discretionary company-sponsored annual bonus program.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Number of Employees: 5,001-10,000 employees