IT​/Tech, Cybersecurity, Information Security

Position: 0.0
Job Purpose

Supports the security of Progress Rail's information technology, operational technology, and locomotive systems, networks, and data.

Company Description

Progress Rail stands at the intersection of legacy and innovation-driving the future of rail with a pioneering spirit. Since its founding in 1983, the company has grown to become one of the world's largest and most trusted providers of railroad products, services, and technologies. Today, Progress Rail delivers a comprehensive portfolio of cost-effective solutions to railway customers around the globe. From the rails themselves to the EMD locomotives that ride them, the company's products are in operation across more than 100 countries-powering progress and connecting communities.

In 2006, Progress Rail joined Caterpillar Inc., further strengthening its ability to lead the rail industry with cutting-edge technology, unmatched expertise, and a commitment to excellence. At Progress Rail, the team is not just building the future of rail-they are making history every day.

Education / Training

* Bachelor's degree or equivalent practical experience in Information Technology, Cybersecurity, Computer Science, Engineering, or a related field.

Key Job Elements

* Support the implementation and maintenance of cybersecurity policies, standards, and procedures to protect the organization's IT and network infrastructure, data, and information systems.

* Assist in identifying and responding to cybersecurity risks, vulnerabilities, and security events under the guidance of senior analysts or cybersecurity engineers.

* Participate in vulnerability testing, risk assessments, and security checks across enterprise environments.

* Conduct research on emerging cybersecurity threats, common attack techniques, and industry security standards, then communicate key findings and insights to the broader security team.

* Support the execution of IT security policies and standards within assigned regions, systems, or platforms.

* Assist with security documentation efforts, including policies, procedures, standards, reports, and technical reference materials.

* Work with IT, engineering, and business partners to gather and document security requirements for systems and applications.

* Partner with product and service owners to document logical architecture designs while ensuring compliance with enterprise standards.

* Support basic system and technology integration activities by understanding cybersecurity considerations and risks associated with integrating applications, platforms, or infrastructure.

* Participate in security monitoring and analysis activities, learning common attack methods, defensive controls, and the use of security tools.

* Escalate identified issues, risks, or incidents to senior team members and follow established cybersecurity processes and procedures.

Qualifications and Experience

* Foundational understanding of cybersecurity concepts, including common threats, vulnerabilities, and defensive controls.

* Basic knowledge of cybersecurity standards and policies and the ability to follow documented procedures and guidance.

* Familiarity with information security technologies such as firewalls, authentication mechanisms, endpoint protection, or security monitoring tools.

* Understanding of basic application security concepts, including common vulnerabilities and secure development principles.

* Ability to gather, document, and communicate security requirements with guidance from senior team members.

* Strong willingness to learn, follow established cybersecurity practices, and apply feedback from more experienced analysts.

* Clear written and verbal communication skills suitable for documenting findings and collaborating with internal teams.

Preferred Qualifications:

* Coursework, internships, or early professional experience in cybersecurity, information security, or IT operations.

* Exposure to cybersecurity frameworks or standards such as NIST, CIS Controls, or ISO 27001.

* Familiarity with basic security monitoring, vulnerability scanning, or incident tracking tools.

* Demonstrated interest in cybersecurity through labs, certifications in progress, or self-directed learning.

Skills Descriptors:

* Cybersecurity Standards and Policies:
Basic understanding of organizational cybersecurity policies, standards, and procedures; ability to follow and apply them in day-to-day activities.

* Cyber Security:
Foundational knowledge of common cyber-attacks, attack methods, and defensive techniques; awareness of monitoring and forensic concepts.

* Information Security Technologies:
Basic understanding of security tools and technologies used to protect information assets.

* Application Security:
Awareness of common application vulnerabilities and the goals of application security programs.

* Requirements Analysis:
Ability to assist with gathering and documenting functional and non-functional security requirements.

* System and Technology Integration:
Basic understanding of system integration concepts,…