Career Area:
Information Technology
Job Description:
Your Work Shapes the World
Whether it be groundbreaking products, best in class solutions or creating a lifelong career, you can do the work that matters at Caterpillar. With a 95-year legacy of quality and innovation and 150 locations in countries around the world, your impact spans the globe.
At Caterpillar, a brand recognized the world over, your office could be closer than you ever realized. Caterpillar's highly flexible work environment fosters a culture to inspire unconventional ideas to accomplish remarkable results. With life demands ever-changing, Caterpillar provides employees the autonomy to choose their work location based on their daily commitments and how/where they work most efficiently and effectively. It's time to start building what matters most, your career!
When you join Caterpillar, you are joining a team of makers, innovators and doers. We are the people who roll up our sleeves and do the work to build a better world. We don't just talk about progress and innovation. We make it happen. And we are proud of that because it helps our customers build and power the world we live in - the roads, hospitals, homes and infrastructure. Without a dedicated workforce Caterpillar could not effectively meet our customer's needs. Join us.
Job Purpose:
This is a senior security analyst role on the Caterpillar Cybersecurity Vulnerability Management Team and is focused on delivery of security subject matter expertise for the advancement, execution and sustainability of the Cybersecurity Vulnerability Management Programs.
Description:
Job Duties/Responsibilities:

• Provide strategic/thought leadership on maturing and optimizing Vulnerability Management Programs focused on infrastructure security and protection (VMI).
• Maintain clear ownership and daily accountability of VMI security operational processes and technologies.
• Provide direction and support of operational tools and processes for identifying and communicating vulnerable items for Vulnerability Management Infrastructure (VMI).
• Provide input and support to leaders/peers from architecture, engineering, and IT operations on architecting tools and solutions related to vulnerability and secure configuration management.
• Obtain and maintain knowledge on existing security procedures and directives related to vulnerability management.
• Provide overview of services and status of key project to stakeholders and security leadership.
• SME and/or key contributor on team deliverables and key projects. Provide oversight for VM activities such as; new tool implementation/investigation, significant changes, and process improvements.
• Develop and report on metrics to departmental and business unit leaders & stakeholders.
• Maintenance and configuration of API's for creating vulnerability groups in ServiceNow
• Develop and maintain workflows in ServiceNow related to vulnerability management remediation processes.
• Interface with IT Operations staff and leadership to drive efficiency into vulnerability management processes in ServiceNow
• Educate Caterpillar workforce on VMI operational processes to ensure successful execution.

Basic Requirements:

• Bachelor (4 year) degree in Security Engineering/Architecture, Computer Science, Cybersecurity or a related field
• 5 years of Cybersecurity, Information Technology, Risk Management and/or Cyber Threat Intelligence
• 5-8 years of Information Technology experience

Top Candidate Will Also Have:

• One or more professional information security certification from an accredited institution (CISSP, CCSP, CSSLP, CISM, GISCP, GWAPT, GWEB etc.)
• Other vendor certifications such as ServiceNow and Qualys are preferred, but not required.
• 5+ years of Information Security Knowledge of Information Security, IT Risks and Controls assessment, Cyber Threat assessments
• Knowledge of information security frameworks, ISO 27001, 27002, NIST CSF, NIST 800-82.
• Knowledge of Cybersecurity risks associated with vulnerability testing, patch management, and secure configuration management.
• Experience with vulnerability scanning tools & technologies such as Qualys.
• Experience with Vulnerability Response Module in ServiceNow or other ServiceNow module experience.
• Excellent critical thinking, analytical and problem-solving skills.
• Ability to adjust to multiple demands, changing priorities, ambiguity, and rapid change, while multitasking effectively.
• Exhibit strong influencing / negotiation skills as well as written/verbal communication skills and presentation skills.
• Ability to work with and influence developers, development managers, project managers, technology peers, and business contacts are required.

Additional Details:

• Location: Dallas, Texas; Nashville, Tennessee; East Peoria, Illinois
• Relocation is offered

Employee benefit details:
Our goal at Caterpillar is for you to have a rewarding career. Our teams are critical to the success of our customers who build a better world.
Here you earn more than just a salary, because we value your performance. We offer a total rewards package that provides day one benefits [medical, dental, vision, RX, and 401(k)] along with the potential of an annual bonus.
Additional benefits include paid vacation days and paid holidays (prorated based upon hire date).
Final details:
Please frequently check the email associated with your application, including the junk/spam folder, as this is the primary correspondence method. If you wish to know the status of your application - please use the candidate log-in on our career website as it will reflect any updates to your status.
This employer is not currently hiring foreign national applicants that require or will require sponsorship tied to a specific employer, such as H, L, TN, F, J, E, O. As a global company, Caterpillar offers many job opportunities outside of the U.S. which can be found through our employment website at www.Caterpillar.com/Careers
Relocation is available for this position.
EEO/AA Employer. All qualified individuals - Including minorities, females, veterans and individuals with disabilities - are encouraged to apply.
Not ready to apply? Submit your information to our Talent Network here .