Lead Cybersecurity Engineer - Caterpillar Financial Services Corporation : Job Details

Career Area:

Job Description:

Your Work Shapes the World at Caterpillar Inc.

When you join Caterpillar, you're joining a global team who cares not just about the work we do – but also about each other. We are the makers, problem solvers, and future world builders who are creating stronger, more sustainable communities. We don't just talk about progress and innovation here – we make it happen, with our customers, where we work and live. Together, we are building a better world, so we can all enjoy living in it.

Role Summary:

Join the DevOps Cybersecurity team of Cat Digital and establish cybersecurity practice within the application community. You will have deep integration with applications as they move from an idea into a solution, integrating Security practices and enabling delivery for Caterpillar Digital Applications. Be a part of the team that is using innovative solutions and methods to securely enable, build, and deploy modern applications and software.

What you will do:

As a Lead Cybersecurity Engineer, you will be responsible for understanding and contributing to Security by Design practices, secure application software development lifecycle practices, security testing and assessment, and the integration of Security with DevOps. This role is responsible for security engineering of the cloud (AWS, Azure) environments and vulnerability management of both Infrastructure as Code (IaC) and application development (SAST/DAST). Engineers will spend their time helping development teams identify and track security risks to remediation while embracing concepts of agile delivery and DevOps.

• Review and assessment of architectural artifacts (e.g. architecture diagrams) for compliance to security policy and identification of risks and potential areas of improvement
• Collaborate with peer Cybersecurity professionals in the assessment of IT solutions for security posture
• Liaison between Caterpillar Cybersecurity organization and the rest of Caterpillar to communicate, embed, and demonstrate compliance to Cybersecurity requirements
• Acts as team leader for development and support groups; provides programming and application/technical leadership, guidance, and assistance to other team members.
• Technical point of contact for application teams related to Application Security Operations.
• Understand and communicate business risk with security risk.
• Understand and identify the existing processes and security gaps.
• Guide to improve and streamline the development process to secure the application in every stage of software development by implementing DevSecOps
• Maintain current knowledge on existing security procedures, directives and technology controls including application testing, threat modeling, attack and penetration testing, data classification and data handling
• Participate in industry working groups and provide insights to product development teams on leading architecture, design, and security practices
• Understand security requirements and risk tolerance baselines
• Keep development teams accountable to metrics measuring risk

What you will have:

• Decision Making and Critical Thinking: Knowledge of the decision-making process and associated tools and techniques; ability to accurately analyze situations and reach productive decisions based on informed judgment.
• Effective Communications: Understanding effective communication concepts, tools and techniques; ability to effectively transmit, receive, and accurately interpret ideas, information, and needs through the application of appropriate communication behaviors.
• Software Development Life Cycle: Knowledge of software development life cycle; ability to use a structured methodology for delivering and managing new or enhanced software products to the marketplace.
• Software Product Design/Architecture: Knowledge of software product design; ability to convert market requirements into the software product design.
• Software Integration Engineering: Knowledge of software integration processes and functions; ability to design, develop and maintain interfaces and linkage to alternative platforms and software packages.

Consideration for top candidates:

• Leading large more complex application security initiatives across multiple teams.
• Demonstrated experience leading software engineering projects.
• Application security expertise understanding vulnerabilities and remediation solutions (OWASP, CWE/CVE, SANS 25)
• Experience with a wide variety of information security processes and principles, such as:
  • Enterprise security architecture
  • Threat modeling
  • Vulnerability assessment
  • Risk analysis
  • Defense in depth
  • SDLC and product development processes
  • Identity and access management
  • API security
  • SCA/SAST/DAST
• Cloud security experience with MS Azure and/or AWS
• Professional certification (CISSP, CCSP, GWAPT, GWEB, AWS SA / Certified Security, etc.)
• Development experience (Java, Python, .Net, JS, or equivalent)
• Implementation of automation and scripting

Additional Details:

This position has the option to be based out of either our Chicago, IL, Peoria, IL, or Irving, TX (Dallas) offices.

#LI

#BI (used to post on Built In Chicago)

Summary Pay Range:

Compensation and benefits offered may vary depending on multiple individualized factors, job level, market location, job-related knowledge, skills, individual performance and experience. Please note that salary is only one component of total compensation at Caterpillar.

Benefits:

Subject to plan eligibility, terms, and guidelines. This is a summary list of benefits.

• Medical, dental, and vision benefits*

• Paid time off plan (Vacation, Holidays, Volunteer, etc.)*

• 401(k) savings plans*

• Health Savings Account (HSA)*

• Flexible Spending Accounts (FSAs)*

• Health Lifestyle Programs*

• Employee Assistance Program*

• Voluntary Benefits and Employee Discounts*

• Career Development*

• Incentive bonus*

• Disability benefits

• Life Insurance

• Parental leave

• Adoption benefits

• Tuition Reimbursement

* These benefits also apply to part-time employees

Posting Dates:

Any offer of employment is conditioned upon the successful completion of a drug screen.

Caterpillar is an Equal Opportunity Employer, Including Veterans and Individuals with Disabilities. Qualified applicants of any age are encouraged to apply.

Not ready to apply? Join our Talent Community.