Software Engineering Manager, Cybersecurity

Career Area:

Technology, Digital and Data

Job Description:

Your Work Shapes the World at Caterpillar Inc.

When you join Caterpillar, you're joining a global team who cares not just about the work we do – but also about each other. We are the makers, problem solvers, and future world builders who are creating stronger, more sustainable communities. We don't just talk about progress and innovation here – we make it happen, with our customers, where we work and live. Together, we are building a better world, so we can all enjoy living in it.

Cat Digital is the digital and technology arm of Caterpillar Inc., leveraging the latest technologies to build industry leading digital solutions for our customers and dealers. With over 1.5 million connected assets worldwide, our teams use data, technology, advanced analytics, telematics, and AI capabilities to help our customers build a better, more sustainable world.

• Job Summary
• Manages the planning, organization and implementation of complex programs. Build security into the way we build software. We are looking for an engineering manager who can combine people leadership with hands-on application security expertise to strengthen cybersecurity across a division’s application and product portfolio. You will lead and develop a team, equip engineering groups and security champions with practical tools and guidance, and make secure delivery a shared responsibility.

Partnering with product, engineering, DevOps, quality assurance and central cybersecurity teams, you will turn enterprise security standards into repeatable engineering practices. This role offers the opportunity to influence architecture, improve delivery processes and demonstrate measurable risk reduction while balancing customer needs, delivery speed and business priorities.

What You Will Do:

• •Lead, hire, coach and develop an engineering team. Set clear goals, manage performance and build a network of security champions who strengthen ownership across delivery teams.
• •Own the division’s application security improvement roadmap in partnership with central cybersecurity. Translate business needs and enterprise policy into prioritized initiatives, work plans, schedules, resource estimates and progress reviews.
• •Manage team capacity, budgets, tools and supplier relationships. Review technical standards, architecture and design conformance, resolve delivery constraints and drive continuous improvement in engineering quality and service effectiveness.
• •Embed security-by-design, threat modeling, secure code and pull-request review, and security testing into the software development lifecycle. Guide secure handling of secrets, cloud configuration and third-party dependencies.
• •Establish documented security release gates using approved enterprise processes. Ensure API and endpoint authentication, authorization and access-control reviews are completed and approved before code progresses through environments.
• •Accelerate adoption of shared security tools and preventive controls within continuous integration and delivery pipelines. Apply automation and AI-assisted scanning with appropriate oversight, validated findings and clear accountability.
• •Lead rigorous vulnerability triage with security experts: validate accuracy, remove duplicates, apply a consistent severity rubric such as CVSS, assess business impact and prioritize high-risk issues.
• •Assign remediation owners, agree timelines and track findings to verified closure. Escalate risk through established governance, address systemic root causes and prioritize shared-platform fixes that prevent recurrence.
• •Maintain accurate application, asset and repository inventories with clear ownership mapping. Build trustworthy portfolio dashboards covering scan coverage, validated findings, remediation aging, agreed service-level performance and risk reduction.
• •Lead regular security progress reviews and communicate decisions, trade-offs and support needs to stakeholders. Coordinate audit evidence, policy alignment and remediation with central cybersecurity and application security teams.
• •Create a shared home for division security guidance, training and documentation. Coach teams and suppliers, encourage proactive discovery and responsible self-reporting, and make security practices sustainable in everyday engineering.

What you will have:

• •Products and Services: Knowledge of major products and services and product and service groups; ability to apply knowledge of product and service appropriately to diverse situations.
• •Organizational Leadership: Knowledge of leadership concepts and ability to use strategies and skills to enlist others in setting, embracing and achieving objectives.
• •Software Development: Knowledge of software development tools and activities; ability to produce software products or systems in line with product requirements.
• •Software Development Life Cycle: Knowledge of software development life cycle; ability to use a structured methodology for delivering and managing new or enhanced software products to the marketplace.
• •Software Integration Engineering: Knowledge of software integration processes and functions; ability to design, develop and maintain interfaces and linkage to alternative platforms and software packages.
• •Software Product Design/Architecture: Knowledge of software product design; ability to convert market requirements into the software product design.
• •Software Quality Assurance and Testing: Knowledge of software quality assurance and testing; ability to apply appropriate processes, tools, and techniques for assuring a high level of quality in computer software products and systems.
• •IT Service Management (ITSM): Knowledge of Information Technology (IT) service; ability to manage IT services and oversee service operations.

Consideration for top candidates:

• •A bachelor’s degree in computer science, information systems, cybersecurity or a related field, or equivalent practical experience.
• •Strong experience as a Software Engineer Manager or lead experience
• •Strong software development, architecture, integration and testing knowledge, with practical experience applying secure development practices to modern applications, APIs and cloud environments.
• •Broad cybersecurity knowledge and hands-on application security judgment, including threat modeling, authentication and authorization, vulnerability validation, remediation and automated security controls.
• •Experience translating security policies and frameworks into engineering controls, supporting audits and managing risk-based improvement programs with measurable outcomes.
• •Practical knowledge of OWASP guidance and security testing tools, including static and dynamic analysis, dependency and secret scanning, and integration of controls into delivery pipelines required
• •A record of building security champions, improving engineering practices and using reliable metrics to drive adoption, remediation and recurring-risk reduction.
• •Clear communication, stakeholder and program leadership skills. Ability to influence across teams, explain technical risk in business terms and balance security, quality, cost and delivery speed.
• •Experience scaling application security across a complex or global enterprise, including product-centric or Agile delivery and collaboration with central security functions preferred
• •Relevant certifications such as CISSP, CISM, CSSLP or GIAC application security credentials; a related master’s degree; or comparable advanced expertise demonstrated through practice preferred

Additional Details:

• •This position requires the candidate to be in Chicago, IL, Peoria, IL, Denver, CO or Dallas, TX
• •Relocation assistance is NOT available for this position
• •Visa sponsorship is NOT available with this position.
• •This position will require up to 20% travel

Summary Pay Range:

$147,760.00 - $240,110.00

Compensation and benefits offered may vary depending on multiple individualized fa