Hybrid Cybersecurity Engineer – DevSecOps

at Dow

• Job title: Cybersecurity Engineer – DevSecOps
• Job type: Full Time
• Experience level: Senior, Lead
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Cloud, Cyber Security
• Location requirements: Hybrid, Midland, United States

About the role

• Cybersecurity Engineer developing a world-class cyber program focusing on DevSecOps and security innovation at Dow. Collaborating with teams to enhance security in applications and infrastructure.

Responsibilities

• Applies expanded conceptual and practical knowledge of Information Technology and cybersecurity towards developing a world-class cyber program.
• Focuses on information security innovation and threat monitoring within the Information Technology environment at Dow.
• Uses prescribed guidelines or policies in analyzing situations and receives a moderate level of guidance and direction.
• Provides informal guidance to new team members.
• Analyzes possible solutions using technical experience, judgment, and precedents to solve problems.
• Design, implement, and maintain automated security solutions to enhance threat prevention, detection, response, and remediation in DevOps tooling and pipelines.
• Integrate security into DevOps pipelines (DevSecOps), ensuring continuous security throughout code development, deployment, and operations.
• Assist global development community with securing their applications through vulnerability scanning and implementing best practices for application security.
• Collaborate with software engineers, architects, and IT staff to drive secure development and deployment processes.
• Prioritize vulnerabilities based on risk and coordinate remediation efforts with IT, DevOps, system owners, and application teams.
• Provide support and resolution for remediation issues and validate post-remediation effectiveness.
• Communicate risks and recommend cost-effective security controls to business stakeholders.
• Contribute to general cyber engineering initiatives, including network security, system hardening, and incident response.
• Develop and maintain dashboards and metrics to track vulnerability trends and remediation progress in the DevSecOps areas globally.
• Lead guidance and training on secure configurations and best practices.
• Stay current with emerging threats, automation tools, and industry trends to continually improve security operations.

Requirements

• A minimum of a bachelor’s degree or relevant military experience at or above a U.S. E5 ranking or Canadian Petty Officer 2nd Class or Sergeant or 8+ years of experience in lieu of a bachelor’s degree.
• Minimum 7 years of relevant experience related to Cybersecurity.
• Proven experience in cybersecurity engineering, with strong knowledge of automation and DevSecOps methodologies.
• Expertise in application security, vulnerability management, and secure coding practices.
• Hands-on experience with security tools, scripting languages, and cloud environments.
• Relevant certifications (e.g., CISSP, CEH, OSCP, CompTIA Security+) are a plus.
• A minimum requirement for this U.S. based position is the ability to work legally in the United States.
• No visa sponsorship/support is available for this position, including for any type of U.S. permanent residency (green card) process.

Benefits

• Equitable and market-competitive base pay and bonus opportunity across our global markets, along with locally relevant incentives.
• Benefits and programs to support your physical, mental, financial, and social well-being, to help you get the care you need...when you need it.
• Competitive retirement program that may include company-provided benefits, savings opportunities, financial planning, and educational resources to help you achieve your long-term financial goals.
• Employee stock purchase programs (availability varies depending on location).
• Student Debt Retirement Savings Match Program (U.S. only).
• Robust medical and life insurance packages that offer a variety of coverage options to meet your individual needs.
• Travel insurance is also available in certain countries/locations.
• Opportunities to learn and grow through training and mentoring, work experiences, community involvement and team building.
• Workplace culture empowering role-based flexibility to maximize personal productivity and balance personal needs.
• Competitive yearly vacation allowance.
• Paid time off for new parents (birthing and non-birthing, including adoptive and foster parents).
• Paid time off to care for family members who are sick or injured.
• Paid time off to support volunteering and Employee Resource Group’s (ERG) participation.
• Wellbeing Portal for all Dow employees, our one-stop shop to promote wellbeing, empowering employees to take ownership of their entire wellbeing journey.
• On-site fitness facilities to help stay healthy and active (availability varies depending on location).
• Employee discounts for online shopping, cinema tickets, gym memberships and more.
• Transportation allowance (availability varies depending on location).
• Meal subsidiaries/vouchers (availability varies depending on location).
• Carbon-neutral transportation incentives e.g. bike to work (availability varies depending on location).