Software Engineering Manager, Cybersecurity

Caterpillar; Chicago (IL); On-site; USD 148,000 - 240,000; Full time

Benefits offered by this job

Medical, dental, and vision benefits

Paid time off (Vacation, Holidays)

401(k) savings plans

Health Savings Account (HSA)

Flexible Spending Accounts (FSAs)

Career Development

Job summary

Caterpillar is seeking an Engineering Manager for application security in Chicago to spearhead secure software delivery. You will build, mentor and lead a security-minded engineering team, partner with product, DevOps and central cybersecurity to implement repeatable security practices, and drive measurable risk reduction across the division.

Applicants should have deep software security expertise, hands-on leadership, and the ability to translate policy into engineering controls.

Qualifications

• Bachelor’s degree in computer science, information systems, cybersecurity or related field, or equivalent practical experience.
• Strong experience as a Software Engineer Manager or lead experience.
• Strong software development, architecture, integration and testing knowledge, with practical secure development practices.
• Broad cybersecurity knowledge including threat modeling, authentication and authorization, vulnerability remediation and automated controls.
• Experience translating security policies into engineering controls and managing risk-based improvement programs.
• Familiarity with OWASP guidance and security testing tools; knowledge of static/dynamic analysis and dependency/secret scanning.
• Proven ability to build security champions and drive measurable risk reduction.

Responsibilities

• Lead, hire, coach and develop an engineering team.
• Set goals, manage performance and build security champions across delivery teams.
• Own the division’s application security improvement roadmap with central cybersecurity.
• Translate business needs into prioritized security initiatives, schedules and resource estimates.
• Manage team capacity, budgets, tools and supplier relationships.
• Review architecture and conformance, resolve delivery constraints and improve engineering quality.
• Embed security-by-design, threat modeling, secure coding and PR review into SDLC.
• Guide secure handling of secrets, cloud configs and third-party dependencies.
• Establish secure release gates using enterprise processes.
• Ensure API authentication/authorization reviews before progression across environments.
• Accelerate adoption of shared security tools and preventive controls in CI/CD.
• Apply automation and AI-assisted scanning with oversight and accountability.
• Lead vulnerability triage with security experts and prioritize high-risk issues.
• Assign remediation owners, set timelines and track verified closures.
• Escalate risk and prioritize cross-platform fixes to prevent recurrence.
• Maintain inventories with ownership mapping and build dashboards for risk metrics.
• Lead security progress reviews and communicate decisions to stakeholders.
• Coordinate audit evidence and remediation with central cybersecurity teams.
• Create a shared home for division security guidance and training.

Skills

Security leadership

Threat modeling

Secure coding practices

Cloud security

Team building

Stakeholder communication

OWASP knowledge

Automation tooling

Education

Bachelor's degree in CS/IS/Cybersecurity or related field

CISSP/CISM/CSSLP GIAC preferred

Tools

OWASP ZAP

SAST tools

DAST tools

CI/CD security tools

Job description

Career Area: Technology, Digital and Data

Job Description: Your Work Shapes the World at Caterpillar Inc. When you join Caterpillar, you're joining a global team who cares not just about the work we do – but also about each other. We are the makers, problem solvers, and future world builders who are creating stronger, more sustainable communities. We don't just talk about progress and innovation here – we make it happen, with our customers, where we work and live. Together, we are building a better world, so we can all enjoy living in it. Cat Digital is the digital and technology arm of Caterpillar Inc., leveraging the latest technologies to build industry leading digital solutions for our customers and dealers. With over 1.5 million connected assets worldwide, our teams use data, technology, advanced analytics, telematics, and AI capabilities to help our customers build a better, more sustainable world.

Job Summary

Manages the planning, organization and implementation of complex programs. Build security into the way we build software. We are looking for an engineering manager who can combine people leadership with hands‑on application security expertise to strengthen cybersecurity across a division’s application and product portfolio. You will lead and develop a team, equip engineering groups and security champions with practical tools and guidance, and make secure delivery a shared responsibility. Partnering with product, engineering, DevOps, quality assurance and central cybersecurity teams, you will turn enterprise security standards into repeatable engineering practices. This role offers the opportunity to influence architecture, improve delivery processes and demonstrate measurable risk reduction while balancing customer needs, delivery speed and business priorities.

What You Will Do

• Lead, hire, coach and develop an engineering team.
• Set clear goals, manage performance and build a network of security champions who strengthen ownership across delivery teams.
• Own the division’s application security improvement roadmap in partnership with central cybersecurity.
• Translate business needs and enterprise policy into prioritized initiatives, work plans, schedules, resource estimates and progress reviews.
• Manage team capacity, budgets, tools and supplier relationships.
• Review technical standards, architecture and design conformance, resolve delivery constraints and drive continuous improvement in engineering quality and service effectiveness.
• Embed security‑by‑design, threat modeling, secure code and pull‑request review, and security testing into the software development lifecycle.
• Guide secure handling of secrets, cloud configuration and third‑party dependencies.
• Establish documented security release gates using approved enterprise processes.
• Ensure API and endpoint authentication, authorization and access‑control reviews are completed and approved before code progresses through environments.
• Accelerate adoption of shared security tools and preventive controls within continuous integration and delivery pipelines.
• Apply automation and AI‑assisted scanning with appropriate oversight, validated findings and clear accountability.
• Lead rigorous vulnerability triage with security experts: validate accuracy, remove duplicates, apply a consistent severity rubric such as CVSS, assess business impact and prioritize high‑risk issues.
• Assign remediation owners, agree timelines and track findings to verified closure.
• Escalate risk through established governance, address systemic root causes and prioritize shared‑platform fixes that prevent recurrence.
• Maintain accurate application, asset and repository inventories with clear ownership mapping.
• Build trustworthy portfolio dashboards covering scan coverage, validated findings, remediation aging, agreed service‑level performance and risk reduction.
• Lead regular security progress reviews and communicate decisions, trade‑offs and support needs to stakeholders.
• Coordinate audit evidence, policy alignment and remediation with central cybersecurity and application security teams.
• Create a shared home for division security guidance, training and documentation.
• Coach teams and suppliers, encourage proactive discovery and responsible self‑reporting, and make security practices sustainable in everyday engineering.

What you will have

Products and Services: Knowledge of major products and services and product and service groups; ability to apply knowledge of product and service appropriately to diverse situations.

Organizational Leadership: Knowledge of leadership concepts and ability to use strategies and skills to enlist others in setting, embracing and achieving objectives.

Software Development: Knowledge of software development tools and activities; ability to produce software products or systems in line with product requirements.

Software Development Life Cycle: Knowledge of software development life cycle; ability to use a structured methodology for delivering and managing new or enhanced software products to the marketplace.

Software Integration Engineering: Knowledge of software integration processes and functions; ability to design, develop and maintain interfaces and linkage to alternative platforms and software packages.

Software Product Design/Architecture: Knowledge of software product design; ability to convert market requirements into the software product design.

Software Quality Assurance and Testing: Knowledge of software quality assurance and testing; ability to apply appropriate processes, tools, and techniques for assuring a high level of quality in computer software products and systems.

IT Service Management (ITSM): Knowledge of Information Technology (IT) service; ability to manage IT services and oversee service operations.

Consideration for top candidates: A bachelor’s degree in computer science, information systems, cybersecurity or a related field, or equivalent practical experience. Strong experience as a Software Engineer Manager or lead experience Strong software development, architecture, integration and testing knowledge, with practical experience applying secure development practices to modern applications, APIs and cloud environments. Broad cybersecurity knowledge and hands‑on application security judgment, including threat modeling, authentication and authorization, vulnerability validation, remediation and automated security controls. Experience translating security policies and frameworks into engineering controls, supporting audits and managing risk‑based improvement programs with measurable outcomes. Practical knowledge of OWASP guidance and security testing tools, including static and dynamic analysis, dependency and secret scanning, and integration of controls into delivery pipelines required A record of building security champions, improving engineering practices and using reliable metrics to drive adoption, remediation and recurring‑risk reduction. Clear communication, stakeholder and program leadership skills. Ability to influence across teams, explain technical risk in business terms and balance security, quality, cost and delivery speed. Experience scaling application security across a complex or global enterprise, including product‑centric or Agile delivery and collaboration with central security functions preferred Relevant certifications such as CISSP, CISM, CSSLP or GIAC application security credentials; a related master’s degree; or comparable advanced expertise demonstrated through practice preferred.

Additional Details

This position requires the candidate to be in Chicago, IL, Peoria, IL, Denver, CO or Dallas, TX Relocation assistance is NOT available for this position Visa sponsorship is NOT available with this position. This position will require up to 20% travel

Summary Pay Range

$147,760.00 - $240,110.00

Compensation and benefits offered may vary depending on multiple individualized factors, job level, market location, job‑related knowledge, skills, individual performance and experience. Please note that salary is only one component of total compensation at Caterpillar.

Benefits

Subject to plan eligibility, terms, and guidelines. This is a summary list of benefits.

• Medical, dental, and vision benefits
• Paid time off plan (Vacation, Holidays, Volunteer, etc.)
• 401(k) savings plans
• Health Savings Account (HSA)
• Flexible Spending Accounts (FSAs)
• Health Lifestyle Programs
• Employee Assistance Program
• Voluntary Benefits and Employee Discounts
• Career Development
• Incentive bonus
• Disability benefits Life Insurance Parental leave Adoption benefits Tuition Reimbursement \* These benefits also apply to part‑time employees

This position requires working onsite five days a week.

Posting Dates

Any offer of employment is conditioned upon the successful completion of a drug screen.

Equal Opportunity Statement

Caterpillar is an Equal Opportunity Employer, Including Veterans and Individuals with Disabilities. Qualified applicants of any age are encouraged to apply.

Additional Culture Info

Not ready to apply? Join our Talent Community. There’s more to work at Caterpillar than just the work itself. We hire smart, friendly people and it shows in our culture. We hold ourselves to high standards and make sure our values of integrity, excellence, teamwork, commitment and sustainability come to life in the way we work. We make sure our employees feel continuously challenged while also supported. We provide professional growth opportunities, including leadership programs. We celebrate the diversity of our team, while also working together as one Caterpillar. Our culture, like everything at our company, is made possible by each employee’s contribution. Person by person, we create the environment we work in, and we are proud of the Caterpillar we’ve built.