Cybersecurity Engineering Manager

Caterpillar; Chicago (IL); On-site; USD 148,000 - 240,000; Full time

Benefits offered by this job

Medical, dental, and vision benefits

Paid time off (Vacation, Holidays)

401(k) savings plans

Health Savings Account (HSA)

Flexible Spending Accounts (FSAs)

Career Development

Job summary

Caterpillar is seeking an Engineering Manager for application security in Chicago to spearhead secure software delivery. You will build, mentor and lead a security-minded engineering team, partner with product, DevOps and central cybersecurity to implement repeatable security practices, and drive measurable risk reduction across the division.

Applicants should have deep software security expertise, hands-on leadership, and the ability to translate policy into engineering controls.

Qualifications

• Bachelor’s degree in computer science, information systems, cybersecurity or related field, or equivalent practical experience.
• Strong experience as a Software Engineer Manager or lead experience.
• Strong software development, architecture, integration and testing knowledge, with practical secure development practices.
• Broad cybersecurity knowledge including threat modeling, authentication and authorization, vulnerability remediation and automated controls.
• Experience translating security policies into engineering controls and managing risk-based improvement programs.
• Familiarity with OWASP guidance and security testing tools; knowledge of static/dynamic analysis and dependency/secret scanning.
• Proven ability to build security champions and drive measurable risk reduction.

Responsibilities

• Lead, hire, coach and develop an engineering team.
• Set goals, manage performance and build security champions across delivery teams.
• Own the division’s application security improvement roadmap with central cybersecurity.
• Translate business needs into prioritized security initiatives, schedules and resource estimates.
• Manage team capacity, budgets, tools and supplier relationships.
• Review architecture and conformance, resolve delivery constraints and improve engineering quality.
• Embed security-by-design, threat modeling, secure coding and PR review into SDLC.
• Guide secure handling of secrets, cloud configs and third-party dependencies.
• Establish secure release gates using enterprise processes.
• Ensure API authentication/authorization reviews before progression across environments.
• Accelerate adoption of shared security tools and preventive controls in CI/CD.
• Apply automation and AI-assisted scanning with oversight and accountability.
• Lead vulnerability triage with security experts and prioritize high-risk issues.
• Assign remediation owners, set timelines and track verified closures.
• Escalate risk and prioritize cross-platform fixes to prevent recurrence.
• Maintain inventories with ownership mapping and build dashboards for risk metrics.
• Lead security progress reviews and communicate decisions to stakeholders.
• Coordinate audit evidence and remediation with central cybersecurity teams.
• Create a shared home for division security guidance and training.

Skills

Security leadership

Threat modeling

Secure coding practices

Cloud security

Team building

Stakeholder communication

OWASP knowledge

Automation tooling

Education

Bachelor's degree in CS/IS/Cybersecurity or related field

CISSP/CISM/CSSLP GIAC preferred

Tools

OWASP ZAP

SAST tools

DAST tools

CI/CD security tools

Job description

Caterpillar is seeking an Engineering Manager for application security in Chicago to spearhead secure software delivery. You will build, mentor and lead a security-minded engineering team, partner with product, DevOps and central cybersecurity to implement repeatable security practices, and drive measurable risk reduction across the division.

Applicants should have deep software security expertise, hands-on leadership, and the ability to translate policy into engineering controls.