PRINCIPAL SECURITY ENGINEER, CAT DIGITAL

JOB DESCRIPTION:

Join the Application Integration team of Cat Digital and build software solutions that integration common services across our application portfolio and other enterprise systems used by Caterpillar customers and dealers. The integration of applications with various Digital Platform capabilities that are built on the latest technologies by adopting industry’s best architecture patterns, security best practices etc. are critical for application’s success and its adoption.

JOB DUTIES:

As a Principal Security Engineer, you will lead to Secure by design, secured development practices, Security testing and DevSecOps of software systems and/or applications. The Principal Security Engineer is responsible for facilitating security efforts between the Cybersecurity Organization and the development teams creating services on the data platform. Principal Security Engineer will help development teams identify security gaps in their applications and services and assist in coming up with solutions to close those gaps and make services compliant to enterprise security requirements.

• Provide principal level leadership across Cat Digital for the team and projects you are aligned
• Mentor and assist other Security Engineers, providing technical assistance and direction as needed
• Review and assessment of architectural artifacts (e.g. architecture diagrams) for compliance to security policy and identification of risks and potential areas of improvement
• Collaborate with peer Cybersecurity professional in the assessment of IT solution for security posture
• Liaison between Caterpillar Cybersecurity organization and the rest of Caterpillar to communicate, embed, and demonstrate compliance to Cybersecurity requirements
• Technical point of contact for application teams related to automation, CI/CD, and Application Security Operations.
• Understand and communicate business risk with security risk.
• Understand and identify the existing processes and security gaps.
• Guide to improve and streamline the development process to secure the application in every stage of software development by implementing DevSecOps
• Works directly on complex application/technical problem identification and resolution,
• Drives application development focused around delivering of security needs features
• Maintains high standards of software quality within the team by establishing good practices and habits
• Guide the team to develop a structured application/interface code, new program documentation, operations documentation, and user guides in a casual, flexible environment
• Maintain current knowledge on existing security procedures, directives and technology controls including application testing, threat modeling, attack and penetration testing, data classification and data handling
• Participate in industry working groups and provide insights to product development teams on leading architecture, design, and security practices
• Understand security requirements and risk tolerance baselines
• Keep development teams accountable to metrics measuring risk

Basic qualifications:

• Position requires a four-year degree from an accredited college or university.
• 10 years or more of software development experience or at least 5 years of experience with master’s degree in computer science or related field.
• 8+ years in information security
• 5 years or more of developing using languages such as Java, Scala, Python, or Node.JS
• Cloud Security best practices (e.g. Cloud Security Alliance’ CCM – Cloud Controls Matrix)
• Security expertise and hands-on experience with MS Azure and AWS (3+ years of experience)
• Experience with relevant industry standards, such as: ISO 27001, 27002, NIST CSF, ISA 62443 and SOC Reporting
• Experience with a wide variety of information security processes and principles, such as:
  • Enterprise security architecture
  • Threat model development
  • Vulnerability assessment
  • Risk analysis
  • Defense in depth
  • SDLC and product development processes
  • Identity and access management
  • Business process design
  • Web services security

Top candidates will also have:

• Strong understanding and experience with information security technologies
• Ability to coordinate multiple teams in accomplishing process review and improvement
• Ability to work under pressure and within time constraints
• Passion for technology and an eagerness to contribute to a team-oriented environment
• Demonstrated leadership on small to medium-scale projects impacting strategic priorities
• Bachelor’s degree in Computer science or Electrical engineering or related field is required
• Professional information security certification (CISSP, CCSP, CSSLP, GISCP, GWAPT, GWEB etc.)

This position has the option to based out of either our Chicago, IL; Peoria, IL or Dallas, TX office with flexibility for partial remote work from home when we return to office.

Visa sponsorship available for eligible applicants.

EEO/AA Employer. All qualified individuals – Including minorities, females, veterans and individuals with disabilities – are encouraged to apply.

Not ready to apply? Submit your information to our Talent Network here .