Senior Cybersecurity Analyst

Caterpillar Inc.•Nashville, TN

2d•$112,710 - $183,140•Onsite

About The Position

The Senior Cybersecurity Analyst serves as the Qualys Platform Lead, owning the administration, operation, governance, and continuous improvement of Caterpillar’s enterprise Qualys platform. The role provides technical leadership for vulnerability scanning, scanner appliances, Cloud Agents, platform configuration, asset data quality, reporting, integrations, and roadmap delivery across a global environment. The position is the primary Qualys subject matter expert and works with Cybersecurity, Infrastructure, Cloud, Application, ServiceNow, Governance and Compliance, and leadership teams to support vulnerability identification, prioritization, routing, and remediation coordination. It also supports risk-based prioritization using Qualys capabilities, threat intelligence, exploitability, and asset context; evaluates AI-assisted analytics and predictive insights; and assesses risks associated with AI-generated recommendations and automated remediation. The role partners with technical teams to coordinate remediation and secure configurations, provides escalation support and root cause analysis, supports audits and regulatory requirements, maintains vulnerability-management documentation and processes, and identifies automation and process improvements. The position is required to be onsite five days a week. The ideal locations are East Peoria, Illinois; Irving, Texas; or Nashville, Tennessee. Relocation is available; visa sponsorship is not available.

Requirements

Vulnerability management and security operations expertise.
Hands-on experience with Qualys or similar vulnerability management platforms.
Experience with vulnerability scanning, authenticated scans, Cloud Agents, and asset management.
Knowledge of Windows, Linux, TCP/IP networking, AWS, and Azure.
Experience analyzing vulnerability data, CVSS scores, and threat intelligence.
Strong problem-solving, communication, and stakeholder-management skills.
Familiarity with AI, machine learning, and predictive risk modeling.
Experience using Microsoft Copilot, Security Copilot, or similar AI tools for security operations and reporting.
Ability to collaborate across security, infrastructure, and application teams.

Nice To Haves

Qualys certifications, such as Vulnerability Management, Policy Compliance, Web Application Scanning, VMDR, CSAM, ETM, Cloud Agent, or EASM.
Experience with ITIL processes, ticketing platforms such as ServiceNow or Remedy, CI/CD pipelines, and integrations between Qualys and ServiceNow, CMDB, reporting, ticketing, cloud, or security platforms.
Scripting experience for automation, such as Python or PowerShell.
Experience operating in large-scale, complex enterprise environments.
Ability to translate technical findings into actionable direction for non-technical teams.

Responsibilities

Manage Qualys platform configurations, scan profiles, scanner appliances, schedules, authentication records, asset tags, user access and permissions, subscription usage, and operational health.
Maintain high availability, accuracy, and scalability of enterprise vulnerability scanning, and coordinate rescanning and validation activities as needed.
Maintain integrations between Qualys, ServiceNow, CMDB, cloud platforms, reporting systems, and approved security technologies.
Oversee host discovery, authenticated infrastructure scanning, scanner appliance operations, and Cloud Agent deployments.
Analyze vulnerability data to identify trends, coverage gaps, systemic issues, and areas requiring attention.
Lead risk-based vulnerability prioritization using Caterpillar’s risk criteria, Qualys capabilities, threat intelligence, exploitability, and asset context.
Leverage and evaluate AI-assisted analytics, risk-scoring capabilities, and predictive analytics to improve prioritization, identify emerging trends and attack paths, and focus remediation on exploitable risks.
Evaluate emerging technologies and AI use cases to improve operational efficiency, asset discovery, threat exposure analysis, and remediation effectiveness.
Work with Governance and Compliance teams to support audits, controls, and regulatory requirements.
Create, update, and maintain operational documentation, standards, and processes for vulnerability lifecycle management.
Assess and mitigate risks associated with AI-generated recommendations and automated remediation activities.
Partner with Infrastructure, Cloud, Application, and DevOps teams to drive remediation plans and support secure system configurations.
Advise IT partners on vulnerability risks, remediation techniques, and Qualys best practices.
Provide escalation support and root cause analysis for scan failures, agent issues, and false positives.
Evaluate and implement Qualys modules, features, and scanning techniques aligned with Caterpillar’s security roadmap.
Drive automation opportunities for asset onboarding, reporting, ticketing, and scanning workflows.
Identify process gaps and propose enhancements to strengthen vulnerability-management maturity.