Software Engineering Manager, Cybersecurity

Caterpillar•Peoria, IL

3d•Onsite

About The Position

Cat Digital is the digital and technology arm of Caterpillar Inc., leveraging the latest technologies to build industry leading digital solutions for our customers and dealers. With over 1.5 million connected assets worldwide, our teams use data, technology, advanced analytics, telematics, and AI capabilities to help our customers build a better, more sustainable world. We are looking for an engineering manager who can combine people leadership with hands-on application security expertise to strengthen cybersecurity across a division’s application and product portfolio. You will lead and develop a team, equip engineering groups and security champions with practical tools and guidance, and make secure delivery a shared responsibility. Partnering with product, engineering, DevOps, quality assurance and central cybersecurity teams, you will turn enterprise security standards into repeatable engineering practices. This role offers the opportunity to influence architecture, improve delivery processes and demonstrate measurable risk reduction while balancing customer needs, delivery speed and business priorities.

Requirements

Knowledge of major products and services and product and service groups; ability to apply knowledge of product and service appropriately to diverse situations.
Knowledge of leadership concepts and ability to use strategies and skills to enlist others in setting, embracing and achieving objectives.
Knowledge of software development tools and activities; ability to produce software products or systems in line with product requirements.
Knowledge of software development life cycle; ability to use a structured methodology for delivering and managing new or enhanced software products to the marketplace.
Knowledge of software integration processes and functions; ability to design, develop and maintain interfaces and linkage to alternative platforms and software packages.
Knowledge of software product design; ability to convert market requirements into the software product design.
Knowledge of software quality assurance and testing; ability to apply appropriate processes, tools, and techniques for assuring a high level of quality in computer software products and systems.
Knowledge of Information Technology (IT) service; ability to manage IT services and oversee service operations.
A bachelor’s degree in computer science, information systems, cybersecurity or a related field, or equivalent practical experience.
Strong experience as a Software Engineer Manager or lead experience
Strong software development, architecture, integration and testing knowledge, with practical experience applying secure development practices to modern applications, APIs and cloud environments.
Broad cybersecurity knowledge and hands-on application security judgment, including threat modeling, authentication and authorization, vulnerability validation, remediation and automated security controls.
Experience translating security policies and frameworks into engineering controls, supporting audits and managing risk-based improvement programs with measurable outcomes.
Practical knowledge of OWASP guidance and security testing tools, including static and dynamic analysis, dependency and secret scanning, and integration of controls into delivery pipelines required
A record of building security champions, improving engineering practices and using reliable metrics to drive adoption, remediation and recurring-risk reduction.
Clear communication, stakeholder and program leadership skills.
Ability to influence across teams, explain technical risk in business terms and balance security, quality, cost and delivery speed.

Nice To Haves

Experience scaling application security across a complex or global enterprise, including product-centric or Agile delivery and collaboration with central security functions preferred
Relevant certifications such as CISSP, CISM, CSSLP or GIAC application security credentials; a related master’s degree; or comparable advanced expertise demonstrated through practice preferred

Responsibilities

Lead, hire, coach and develop an engineering team.
Set clear goals, manage performance and build a network of security champions who strengthen ownership across delivery teams.
Own the division’s application security improvement roadmap in partnership with central cybersecurity.
Translate business needs and enterprise policy into prioritized initiatives, work plans, schedules, resource estimates and progress reviews.
Manage team capacity, budgets, tools and supplier relationships.
Review technical standards, architecture and design conformance, resolve delivery constraints and drive continuous improvement in engineering quality and service effectiveness.
Embed security-by-design, threat modeling, secure code and pull-request review, and security testing into the software development lifecycle.
Guide secure handling of secrets, cloud configuration and third-party dependencies.
Establish documented security release gates using approved enterprise processes.
Ensure API and endpoint authentication, authorization and access-control reviews are completed and approved before code progresses through environments.
Accelerate adoption of shared security tools and preventive controls within continuous integration and delivery pipelines.
Apply automation and AI-assisted scanning with appropriate oversight, validated findings and clear accountability.
Lead rigorous vulnerability triage with security experts: validate accuracy, remove duplicates, apply a consistent severity rubric such as CVSS, assess business impact and prioritize high-risk issues.
Assign remediation owners, agree timelines and track findings to verified closure.
Escalate risk through established governance, address systemic root causes and prioritize shared-platform fixes that prevent recurrence.
Maintain accurate application, asset and repository inventories with clear ownership mapping.
Build trustworthy portfolio dashboards covering scan coverage, validated findings, remediation aging, agreed service-level performance and risk reduction.
Lead regular security progress reviews and communicate decisions, trade-offs and support needs to stakeholders.
Coordinate audit evidence, policy alignment and remediation with central cybersecurity and application security teams.
Create a shared home for division security guidance, training and documentation.
Coach teams and suppliers, encourage proactive discovery and responsible self-reporting, and make security practices sustainable in everyday engineering.