What You Will Do
Partner with application teams to analyze, validate, prioritize, and remediate security findings from automated and manual sources, including static and dynamic testing, penetration testing, and bug bounty programs.
Provide practical, context-aware security guidance to software engineers, architects, product owners, and leaders; document key decisions and help teams navigate applicable review and approval processes.
Enable and monitor application security testing tools, such as CodeQL and Rapid7, at the repository or application level in accordance with established processes.
Coordinate application onboarding and scope for penetration tests and security assurance assessments, then manage resulting findings through the established defect-management process.
Help application teams improve security maturity through established scorecards and maturity models and collaborate on correction-of-error reports that allow other teams to learn from recurring issues.
What you will have
Decision Making and Critical Thinking: Knowledge of the decision-making process and associated tools and techniques; ability to accurately analyze situations and reach productive decisions based on informed judgment.
Effective Communications: Understanding of effective communication concepts, tools and techniques; ability to effectively transmit, receive, and accurately interpret ideas, information, and needs through the application of appropriate communication behaviors.
Software Development Life Cycle: Knowledge of software development life cycle; ability to use a structured methodology for delivering and managing new or enhanced software products to the marketplace.
Software Integration Engineering: Knowledge of software integration processes and functions; ability to design, develop and maintain interfaces and linkage to alternative platforms and software packages.
Software Product Design/Architecture: Knowledge of software product design; ability to convert market requirements into software product design.
Consideration for top candidates
Hands-on software engineering experience in any programming language or framework, with demonstrated interest or experience in application security.
Experience building or supporting web applications and APIs, including single-page applications and RESTful APIs, on a major cloud platform such as AWS, Microsoft Azure, Google Cloud, or Salesforce.
Experience interpreting and helping remediate findings from static application security testing, dynamic application security testing, software composition analysis, penetration testing, or similar security-assurance methods.
Working knowledge of secure-development resources such as the OWASP Top 10, MITRE Common Weakness Enumeration Top 25, OWASP Application Security Verification Standard, or comparable industry guidance.
Relevant cloud, cybersecurity, or secure software development certifications are preferred, not required. Examples include AWS, Microsoft Azure, Google Cloud, Salesforce, CompTIA Security+, Cloud Security Alliance CCSK, or an ISC2 software security credential.
Additional Details
This position requires the candidate to be in Chicago, IL; Peoria, IL or Dallas, TX
Relocation assistance is NOT available for this position
Visa sponsorship is NOT available with this position.
This position will require up to 10% travel
Summary Pay Range
$112,710.00 - $183,140.00
Compensation and benefits offered may vary depending on multiple individualized factors, job level, market location, job-related knowledge, skills, individual performance and experience. Please note that salary is only one component of total compensation at Caterpillar.
Benefits
Subject to plan eligibility, terms, and guidelines. This is a summary list of benefits.
Medical, dental, and vision benefits*
Paid time off plan (Vacation, Holidays, Volunteer, etc.)*
401(k) savings plans*
Health Savings Account (HSA)*
Flexible Spending Accounts (FSAs)*
Health Lifestyle Programs*
Employee Assistance Program*
Voluntary Benefits and Employee Discounts*
Career Development*
Incentive bonus*
Disability benefits
Life Insurance
Parental leave
Adoption benefits
Tuition Reimbursement
These benefits also apply to part-time employees
This position requires working onsite five days a week.
Visa Sponsorship is not available for this position.
Posting Dates
Any offer of employment is conditioned upon the successful completion of a drug screen.
Caterpillar is an Equal Opportunity Employer, Including Veterans and Individuals with Disabilities. Qualified applicants of any age are encouraged to apply.
Not ready to apply? Join our Talent Community.
