We Hire America Jobs

Career Area:

Technology, Digital and Data

Job Description:

Your Work Shapes the World at Caterpillar Inc.

When you join Caterpillar, you're joining a global team who cares not just about the work we do – but also about each other. We are the makers, problem solvers, and future world builders who are creating stronger, more sustainable communities. We don't just talk about progress and innovation here – we make it happen, with our customers, where we work and live. Together, we are building a better world, so we can all enjoy living in it.

Senior Cybersecurity DevSecOps Analyst

Join Caterpillar as a senior cybersecurity analyst on the Caterpillar Cybersecurity Vulnerability Management Team. This role will be a SAST/SCA Program Leader focused on SAST, SCA, Secrets scanning, DevSecOps transition, web application security testing and security tool integrations within SDLC.

What You Will Do:

• SAST/SCA Program Leader

• Advocate “Shift Left” and DevSecOps transformation.

• Provide operational support for static application security testing (SAST), software composition analysis (SCA), secrets scanning.

• Deliver technical support in the integration of security tools in CI/CD pipelines and S-SDLC

• Educate and provide support to web application teams, owners, developers on application security, SAST/DAST tools and vulnerability management.

• Work with VM team leadership and peers to drive efficiency into vulnerability management processes in ServiceNow and application security services.

• Maintain knowledge on existing security procedures and directives related to application security and vulnerability management.

What You Have:

• Bachelor’s degree in Cybersecurity, Security Engineering/Architecture, Computer Science, or related experience.

• 2-5 years of Cybersecurity, Penetration Testing and/or Vulnerability Management

• Experience with SAST/SCA/Secret Scanning tools - GitHub Advanced Security, CodeQL, Dependabot, Checkmarx, etc.

• Good knowledge of OWASP Guidelines and industry vulnerability scoring standards for application security.

• Good Knowledge of software development processes, integration of security assessments in Software development life cycle (SDLC) process, secure coding is required.

Top Candidate Will Also Have:

• One or more professional information security certification from an accredited institution (CISSP, CCSP, CSSLP, CISM, GISCP, GWAPT, GWEB etc.)

• Experience developing and testing apps in .NET or Java and other leading modern programming languages and technologies.

• Experience with newer development frameworks

• Experience with cloud security: Amazon AWS, Windows Azure

• Excellent critical thinking, problem-solving, as well as written/verbal communication skills

Skills Descriptors:

Communicating Complex Concepts:

• Knowledge of effective presentation tools and techniques to ensure clear understanding; ability to use summarization and simplification techniques to explain complex technical concepts in simple, plain language appropriate to the audience.

Consulting:

• Knowledge of techniques, roles, and responsibilities in providing technical or business guidance to clients, both internal and external; ability to apply consulting knowledge appropriately.

Cybersecurity Standards and Policies:

• Knowledge of developing cybersecurity policies, standards, and procedures; ability to develop and communicate policies, standards and procedures that guide interactions with customers.

Cybersecurity Risk Management:

• Knowledge of tools, techniques, approaches, and processes of cybersecurity risk management; ability to ensure organizational network operation and minimize negative effect by cybersecurity risks.

Information Security Management:

• Knowledge of the processes, tools, and techniques of information security management; ability to deploy and monitor information security systems, while detecting, controlling, and preventing violations of IT security.

Information Security Technologies:

• Knowledge of technologies and technology-based solutions dealing with information security issues; ability to protect information security across the organization using encryption technologies and appropriate security software.

Information Technology (IT) Security Policies:

• Knowledge of IT security policies, standards, and procedures; ability to utilize a variety of administrative skill sets and technical knowledge to ensure cyber security compliance.

System and Technology Integration:

• Knowledge of the features and facilities of systems; ability to integrate and communicate among applications, databases, and technology platforms.

Additional Info :

• The primary location for this position is Peoria, IL, Irving, TX or Nashville, TN. You must be willing to work ONSITE 3 DAYS A WEEK.

• SPONSORSHIP IS NOT AVAILABLE.

• Relocation is available to those who qualify.

What You Will Get:

• Our goal at Caterpillar is for you to have a rewarding career. Our teams are critical to the success of our customers who build a better world.

• Here you earn more than just a salary because we value your performance. We offer a total rewards package that provides benefits on day one (medical, dental, vision, RX, and 401K) along with the potential of an annual bonus. Additional benefits include paid vacation days and paid holidays.

• All qualified individuals - Including minorities, females, veterans, and individuals with disabilities - are encouraged to apply.

About Caterpillar -

Caterpillar Inc. is the world’s leading manufacturer of construction and mining equipment, off-highway diesel and natural gas engines, industrial gas turbines and diesel-electric locomotives. For nearly 100 years, we’ve been helping customers build a better, more sustainable world and are committed and contributing to a reduced-carbon future. Our innovative products and services, backed by our global dealer network, provide exceptional value that helps customers succeed.

Summary Pay Range:

$110,520.00 - $179,640.00

Compensation and benefits offered may vary depending on multiple individualized factors, job level, market location, job-related knowledge, skills, individual performance and experience. Please note that salary is only one component of total compensation at Caterpillar.

Benefits:

Subject to plan eligibility, terms, and guidelines. This is a summary list of benefits.

• Medical, dental, and vision benefits*

• Paid time off plan (Vacation, Holidays, Volunteer, etc.)*

• 401(k) savings plans*

• Health Savings Account (HSA)*

• Flexible Spending Accounts (FSAs)*

• Health Lifestyle Programs*

• Employee Assistance Program*

• Voluntary Benefits and Employee Discounts*

• Career Development*

• Incentive bonus*

• Disability benefits

• Life Insurance

• Parental leave

• Adoption benefits

• Tuition Reimbursement

• These benefits also apply to part-time employees

Posting Dates:

March 17, 2025 - March 30, 2025

Any offer of employment is conditioned upon the successful completion of a drug screen.

EEO/AA Employer. All qualified individuals - Including minorities, females, veterans and individuals with disabilities - are encouraged to apply.

Not ready to apply? Join our Talent Community (http://flows.beamery.com/caterpillarinc/talcom) .