Senior Cybersecurity DevSecOps Analyst
Caterpillar•East Peoria, IL
•$112,710 - $183,140•Onsite
About The Position
Join Caterpillar as a senior cybersecurity analyst on the Caterpillar Cybersecurity Vulnerability Management Team. This role will be a SAST/SCA Program Leader focused on SAST, SCA, Secrets scanning, DevSecOps transition, web application security testing, and security tool integrations within SDLC.
Requirements
- Bachelor’s degree in Cybersecurity, Security Engineering/Architecture, Computer Science, or related experience.
- Cybersecurity, Penetration Testing, and/or Vulnerability Management hands on experience.
- Experience with SAST/SCA/Secret Scanning tools - GitHub Advanced Security, CodeQL, Dependabot, Checkmarx, etc.
- Good knowledge of OWASP Guidelines and industry vulnerability scoring standards for application security.
- Good Knowledge of software development processes, integration of security assessments in Software development life cycle (SDLC) process, secure coding is required.
Nice To Haves
- One or more professional information security certification from an accredited institution (CISSP, CCSP, CSSLP, CISM, GISCP, GWAPT, GWEB etc.)
- Experience developing and testing apps in .NET or Java and other leading modern programming languages and technologies.
- Experience with newer development frameworks
- Experience with cloud security: Amazon AWS, Windows Azure
- Excellent critical thinking, problem-solving, as well as written/verbal communication skills
Responsibilities
- SAST/SCA Program Leader
- Advocate “Shift Left” and DevSecOps transformation.
- Provide operational support for static application security testing (SAST), software composition analysis (SCA), secrets scanning.
- Deliver technical support in the integration of security tools in CI/CD pipelines and S-SDLC
- Educate and provide support to web application teams, owners, developers on application security, SAST/DAST tools and vulnerability management.
- Work with VM team leadership and peers to drive efficiency into vulnerability management processes in ServiceNow and application security services.
- Maintain knowledge on existing security procedures and directives related to application security and vulnerability management.
Benefits
- Medical, dental, and vision benefits
- Paid time off plan (Vacation, Holidays, Volunteer, etc.)
- 401(k) savings plans
- Health Savings Account (HSA)
- Flexible Spending Accounts (FSAs)
- Health Lifestyle Programs
- Employee Assistance Program
- Voluntary Benefits and Employee Discounts
- Career Development
- Incentive bonus
- Disability benefits
- Life Insurance
- Parental leave
- Adoption benefits
- Tuition Reimbursement
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Number of Employees
5,001-10,000 employees
