Software Engineering Manager, Cybersecurity

Career Area:
Technology, Digital and Data

Job Description:

Your Work Shapes the World at Caterpillar Inc. When you join Caterpillar, you're joining a global team who cares not just about the work we do – but also about each other. We are the makers, problem solvers, and future world builders who are creating stronger, more sustainable communities. We don't just talk about progress and innovation here – we make it happen, with our customers, where we work and live.

Together, we are building a better world, so we can all enjoy living in it. Cat Digital is the digital and technology arm of Caterpillar Inc., leveraging the latest technologies to build industry leading digital solutions for our customers and dealers. With over 1.5 million connected assets worldwide, our teams use data, technology, advanced analytics, telematics, and AI capabilities to help our customers build a better, more sustainable world.

Manages the planning, organization and implementation of complex programs. Build security into the way we build software. We are looking for an engineering manager who can combine people leadership with hands‑on application security expertise to strengthen cybersecurity across a division’s application and product portfolio. You will lead and develop a team, equip engineering groups and security champions with practical tools and guidance, and make secure delivery a shared responsibility.

Partnering with product, engineering, Dev Ops, quality assurance and central cybersecurity teams, you will turn enterprise security standards into repeatable engineering practices. This role offers the opportunity to influence architecture, improve delivery processes and demonstrate measurable risk reduction while balancing customer needs, delivery speed and business priorities.

• Lead, hire, coach and develop an engineering team.
• Set clear goals, manage performance and build a network of security champions who strengthen ownership across delivery teams.
• Own the division’s application security improvement roadmap in partnership with central cybersecurity.
• Translate business needs and enterprise policy into prioritized initiatives, work plans, schedules, resource estimates and progress reviews.
• Manage team capacity, budgets, tools and supplier relationships.
• Review technical standards, architecture and design conformance, resolve delivery constraints and drive continuous improvement in engineering quality and service effectiveness.
• Embed security‑by‑design, threat modeling, secure code and pull‑request review, and security testing into the software development lifecycle.
• Guide secure handling of secrets, cloud configuration and third‑party dependencies.
• Establish documented security release gates using approved enterprise processes.
• Ensure API and endpoint authentication, authorization and access‑control reviews are completed and approved before code progresses through environments.
• Accelerate adoption of shared security tools and preventive controls within continuous integration and delivery pipelines.
• Apply automation and AI‑assisted scanning with appropriate oversight, validated findings and clear accountability.
• Lead rigorous vulnerability triage with security experts: validate accuracy, remove duplicates, apply a consistent severity rubric such as CVSS, assess business impact and prioritize high‑risk issues.
• Assign remediation owners, agree timelines and track findings to verified closure.
• Escalate risk through established governance, address systemic root causes and prioritize shared‑platform fixes that prevent recurrence.
• Maintain accurate application, asset and repository inventories with clear ownership mapping.
• Build trustworthy portfolio dashboards covering scan coverage,…