Software Engineering Manager, Cybersecurity
Caterpillar Inc.
Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.
Benefits offered by this job
Job summary
Caterpillar Inc. is seeking an Engineering Manager with hands‑on application security expertise to lead a security‑minded software team. You will partner with product, engineering and central cybersecurity to implement secure delivery practices across a division of applications and products.
You will build and mentor security champions, drive secure design, threat modeling and automated controls, and coordinate risk‑based improvements while balancing delivery speed and business priorities.
Qualifications
- Bachelor's degree in computer science, information systems, cybersecurity or a related field.
- Strong experience as a Software Engineer Manager or lead experience.
- Strong software development, architecture, integration and testing knowledge with practical secure development.
- Broad cybersecurity knowledge including threat modeling, authentication and authorization, vulnerability validation and automated security controls.
- Experience translating security policies into engineering controls and managing risk-based improvement programs.
- Familiarity with OWASP guidance and security testing tools (static/dynamic analysis, secret scanning).
Responsibilities
- Lead, hire, coach and develop an engineering team and security champions.
- Own the division’s application security improvement roadmap with central cybersecurity.
- Manage team budgets, tools and supplier relationships; review architecture and design conformance.
- Embed security-by-design, threat modeling, secure code reviews and security testing into SDLC.
- Establish security release gates and ensure API/endpoint authentication and access control reviews.
- Accelerate adoption of shared security tools within CI/CD; apply automation with oversight.
- Lead vulnerability triage, validate findings and prioritize high-risk issues.
- Assign remediation owners, track milestones and escalate risks.
- Maintain inventories and dashboards for security measurements and risk reduction.
- Lead security progress reviews and coordinate audits with central cybersecurity teams.
- Create a shared repository for division security guidance and training.
Skills
Education
Tools
Job description
When you join Caterpillar, you're joining a global team who cares not just about the work we do – but also about each other. We are the makers, problem solvers, and future world builders who are creating stronger, more sustainable communities. We don't just talk about progress and innovation here – we make it happen, with our customers, where we work and live. Together, we are building a better world, so we can all enjoy living in it.
Technology, Digital and Data
When you join Caterpillar, you're joining a global team who cares not just about the work we do – but also about each other. We are the makers, problem solvers, and future world builders who are creating stronger, more sustainable communities. We don't just talk about progress and innovation here – we make it happen, with our customers, where we work and live. Together, we are building a better world, so we can all enjoy living in it.
Cat Digital is the digital and technology arm of Caterpillar Inc., leveraging the latest technologies to build industry leading digital solutions for our customers and dealers. With over 1.5 million connected assets worldwide, our teams use data, technology, advanced analytics, telematics, and AI capabilities to help our customers build a better, more sustainable world.
Manages the planning, organization and implementation of complex programs. Build security into the way we build software. We are looking for an engineering manager who can combine people leadership with hands‑on application security expertise to strengthen cybersecurity across a division’s application and product portfolio. You will lead and develop a team, equip engineering groups and security champions with practical tools and guidance, and make secure delivery a shared responsibility.
Partnering with product, engineering, DevOps, quality assurance and central cybersecurity teams, you will turn enterprise security standards into repeatable engineering practices. This role offers the opportunity to influence architecture, improve delivery processes and demonstrate measurable risk reduction while balancing customer needs, delivery speed and business priorities.
- Lead, hire, coach and develop an engineering team. Set clear goals, manage performance and build a network of security champions who strengthen ownership across delivery teams.
- Own the division’s application security improvement roadmap in partnership with central cybersecurity. Translate business needs and enterprise policy into prioritized initiatives, work plans, schedules, resource estimates and progress reviews.
- Manage team capacity, budgets, tools and supplier relationships. Review technical standards, architecture and design conformance, resolve delivery constraints and drive continuous improvement in engineering quality and service effectiveness.
- Embed security‑by‑design, threat modeling, secure code and pull‑request review, and security testing into the software development lifecycle. Guide secure handling of secrets, cloud configuration and third‑party dependencies.
- Establish documented security release gates using approved enterprise processes. Ensure API and endpoint authentication, authorization and access‑control reviews are completed and approved before code progresses through environments.
- Accelerate adoption of shared security tools and preventive controls within continuous integration and delivery pipelines. Apply automation and AI‑assisted scanning with appropriate oversight, validated findings and clear accountability.
- Lead rigorous vulnerability triage with security experts: validate accuracy, remove duplicates, apply a consistent severity rubric such as CVSS, assess business impact and prioritize high‑risk issues.
- Assign remediation owners, agree timelines and track findings to verified closure. Escalate risk through established governance, address systemic root causes and prioritize shared‑platform fixes that prevent recurrence.
- Maintain accurate application, asset and repository inventories with clear ownership mapping. Build trustworthy portfolio dashboards covering scan coverage, validated findings, remediation aging, agreed service‑level performance and risk reduction.
- Lead regular security progress reviews and communicate decisions, trade‑offs and support needs to stakeholders. Coordinate audit evidence, policy alignment and remediation with central cybersecurity and application security teams.
- Create a shared home for division security guidance, training and documentation. Coach teams and suppliers, encourage proactive discovery and responsible self‑reporting, and make security practices sustainable in everyday engineering.
- Products and Services: Knowledge of major products and services and product and service groups; ability to apply knowledge of product and service appropriately to diverse situations.
- Organizational Leadership: Knowledge of leadership concepts and ability to use strategies and skills to enlist others in setting, embracing and achieving objectives.
- Software Development: Knowledge of software development tools and activities; ability to produce software products or systems in line with product requirements.
- Software Development Life Cycle: Knowledge of software development life cycle; ability to use a structured methodology for delivering and managing new or enhanced software products to the marketplace.
- Software Integration Engineering: Knowledge of software integration processes and functions; ability to design, develop and maintain interfaces and linkage to alternative platforms and software packages.
- Software Product Design/Architecture: Knowledge of software product design; ability to convert market requirements into the software product design.
- Software Quality Assurance and Testing: Knowledge of software quality assurance and testing; ability to apply appropriate processes, tools, and techniques for assuring a high level of quality in computer software products and systems.
- IT Service Management (ITSM): Knowledge of Information Technology (IT) service; ability to manage IT services and oversee service operations.
- A bachelor’s degree in computer science, information systems, cybersecurity or a related field, or equivalent practical experience.
- Strong experience as a Software Engineer Manager or lead experience
- Strong software development, architecture, integration and testing knowledge, with practical experience applying secure development practices to modern applications, APIs and cloud environments.
- Broad cybersecurity knowledge and hands‑on application security judgment, including threat modeling, authentication and authorization, vulnerability validation, remediation and automated security controls.
- Experience translating security policies and frameworks into engineering controls, supporting audits and managing risk‑based improvement programs with measurable outcomes.
- Practical knowledge of OWASP guidance and security testing tools, including static and dynamic analysis, dependency and secret scanning, and integration of controls into delivery pipelines required
- A record of building security champions, improving engineering practices and using reliable metrics to drive adoption, remediation and recurring‑risk reduction.
- Clear communication, stakeholder and program leadership skills. Ability to influence across teams, explain technical risk in business terms and balance security, quality, cost and delivery speed.
- Experience scaling application security across a complex or global enterprise, including product‑centric or Agile delivery and collaboration with central security functions preferred
- Relevant certifications such as CISSP, CISM, CSSLP or GIAC application security credentials; a related master’s degree; or comparable advanced expertise demonstrated through practice preferred
- This position requires the candidate to be in Chicago, IL, Peoria, IL, Denver, CO or Dallas, TX
- Relocation assistance is NOT available for this position
- Visa sponsorship is NOT available with this position.
- This position will require up to 20% travel
$147,760.00 - $240,110.00
Subject to plan eligibility, terms, and guidelines. This is a summary list of benefits.
- Medical, dental, and vision benefits*
- Paid time off plan (Vacation, Holidays, Volunteer, etc.)*
- 401(k) savings plans*
- Health Savings Account (HSA)*
- Flexible Spending Accounts (FSAs)*
- Health Lifestyle Programs*
- Employee Assistance Program*
- Voluntary Benefits and Employee Discounts*
- Career Development*
- Incentive bonus*
- Disability benefits
- Life Insurance
- Parental leave
- Adoption benefits
- Tuition Reimbursement
- These benefits also apply to part‑time employees
This position requires working onsite five days a week.
Visa Sponsorship is not available for this position.
Any offer of employment is conditioned upon the successful completion of a drug screen.
Caterpillar is an Equal Opportunity Employer, Including Veterans and Individuals with Disabilities. Qualified applicants of any age are encouraged to apply.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
