Cyber Security Analyst - Vulnerability SME

At Dow, we believe in putting people first and we’re passionate about delivering integrity, respect and safety to our customers, our employees and the planet.

Our people are at the heart of our solutions. They reflect the communities we live in and the world where we do business. Their diversity is our strength. We’re a community of relentless problem solvers that offers the daily opportunity to contribute with your perspective, transform industries and shape the future. Our purpose is simple - to deliver a sustainable future for the world through science and collaboration.If you’re looking for a challenge and meaningful role, you’re in the right place.

Dow (NYSE : DOW) is one of the world’s leading materials science companies, serving customers in high-growth markets such as packaging, infrastructure, mobility and consumer applications. Our global breadth, asset integration and scale, focused innovation, leading business positions and commitment to sustainability enable us to achieve profitable growth and help deliver a sustainable future. We operate manufacturing sites in 30 countries and employ approximately 36,000 people. Dow delivered sales of approximately $43 billion in 2024. References to Dow or the Company mean Dow Inc. and its subsidiaries. ​​​​Learn more about us and our ambition to be the most innovative, customer-centric, inclusive and sustainable materials science company in the world by visiting.

About the role :

Dow has an exciting opportunity for a Cybersecurity Vulnerability Specialist . This role can be located in one of the major Dow hubs listed (Midland, MI., Houston, TX., Sao Paulo, Brazil, or Mumbai, India). This role is responsible for overseeing the identification, assessment, and driving remediation of security vulnerabilities across the Dow’s technology infrastructure. This role involves managing vulnerability scanning tools, coordinating with IT and security teams, and ensuring timely mitigation of risks to protect the organization’s digital assets.

Responsibilities

Vulnerability Program Execution & Improvement

Assist in planning, implementing, and continuously improving the vulnerability management program.Support automation and optimization of the vulnerability lifecycle, including data ingestion, normalization, and compliance metrics.

Assessment & Analysis

Conduct regular vulnerability assessments using automated tools and manual techniques across infrastructure and applications.Review and analyze vulnerability data from various sources (e.g., internal / external scans, penetration tests) to determine risk ratings and business impact.Perform recurring and on-demand scanning of corporate and cloud environments.

Remediation & Collaboration

Prioritize vulnerabilities based on risk and coordinate remediation efforts with IT, DevOps, system owners, and application teams.Provide support and resolution for remediation issues and validate post-remediation effectiveness.Communicate risks and recommend cost-effective security controls to business stakeholders.

Monitoring, Reporting & Compliance

Develop and maintain dashboards and metrics to track vulnerability trends and remediation progress.Ensure scan results are appropriately reported and integrated into relevant systems.Ensure compliance with regulatory and industry standards (e.g., NIST, ISO 27001, PCI-DSS).

Knowledge Sharing & Incident Response

Stay current with emerging threats, vulnerabilities, and security technologies relevant to the environment.Provide guidance and training on secure configurations and best practices.Participate in incident response activities related to exploited vulnerabilities.

Qualifications

A minimum of a bachelor’s degree or relevant military experience at or above a U.S. E6 ranking or Canadian Petty Officer 2nd Class or Sergeant.

Strong understanding of vulnerability management frameworks and tools.

• Minimum of 2 years relevant experience required.
• Experience in cybersecurity, vulnerability management, or incident response required.
• Knowledge of common vulnerabilities and exposures (CVEs), CVSS scoring, temporal scoring and threat modeling.
• Experience with patch management processes and secure system configurations.
• Familiarity with operating systems (Windows, Linux), networking, and cloud environments (i.e. Azure).
• Ability to interpret vulnerability scan results and communicate technical risks to non-technical stakeholders.
• Strong analytical, problem-solving, and organizational skills.
• Excellent communication and collaboration abilities.
• Relevant certifications (e.g., CISSP, CEH, OSCP, CompTIA Security+) are a plus.

A minimum requirement to work legally in the country for which you are applying. No visa sponsorship / support is available for this position, including for any type of permanent residency (green card) process.

Your Skills

Risk Management : The ability to identify, assess, and prioritize risks followed by coordinated efforts to minimize, monitor, and control the probability or impact of unfortunate events.

Security Technologies : Proficiency in tools and platforms used to detect, prevent, and respond to cybersecurity threats (e.g., vulnerability scanners, endpoint protection, SIEM).

Critical Thinking : The capacity to analyze complex data, identify patterns, and make informed decisions.

Cyber Risks : Understanding of threats, vulnerabilities, and potential impacts to digital assets and infrastructure.

Written Communication : The ability to convey technical findings, risks, and recommendations clearly and concisely in written form.

Note : Relocation assistance is not provided with this position.

Benefits – What Dow offers you

We invest in you.

Dow invests in total rewards programs to help you manage all aspects of you : your pay, your health, your life, your future, and your career. You bring your background, talent, and perspective to work every day. Dow rewards that commitment by investing in your total wellbeing.

Here are just a few highlights of what you would be offered as a Dow employee :

Join our team, we can make a difference together.

About Dow

Dow (NYSE : DOW) is one of the world’s leading materials science companies, serving customers in high-growth markets such as packaging, infrastructure, mobility and consumer applications. Our global breadth, asset integration and scale, focused innovation, leading business positions and commitment to sustainability enable us to achieve profitable growth and help deliver a sustainable future. We operate manufacturing sites in 30 countries and employ approximately 36,000 people. Dow delivered sales of approximately $43 billion in 2024. References to Dow or the Company mean Dow Inc. and its subsidiaries. ​​​​Learn more about us and our ambition to be the most innovative, customer-centric, inclusive and sustainable materials science company in the world by visiting.

As part of our dedication to inclusion, Dow is committed to equal opportunities in employment. We encourage every employee to bring their whole self to work each day to not only deliver more value, but also have a more fulfilling career.