Cybersecurity Engineer

Urgent Need Cybersecurity Engineer Any Visa  on W2 onsite Relocation

Job Title - Cybersecurity Engineer 

Location: Mossville or East Peoria office (5 days a week in office)

Duration: 12 months

Any visa on our W2

Important Domain Note

Industry-specific background is not required, however:

• Candidates must have cybersecurity experience related to connected assets or embedded systems.
• This role is not intended for general IT-only cybersecurity profiles.

Business Unit: Autonomy & Automation (A&A)
Team: Digital Technology & Distribution (DT&D) IT

Position Overview

The Senior Cybersecurity Engineer will support the Digital Technology & Distribution (DT&D) team within the Autonomy & Automation (A&A) Business Unit at Caterpillar. The A&A organization focuses on scaling advanced technology solutions across mining, construction, quarry, and aggregates industries to improve customer safety, productivity, and operational efficiency.

This role focuses heavily on connected asset security and embedded systems cybersecurity, ensuring that Caterpillar’s technology platforms and solutions are developed and operated in a secure manner. The engineer will partner with multiple business and technology teams to embed cybersecurity principles across products, platforms, and services.

The position requires deep cybersecurity expertise and the ability to integrate security practices into architecture, development, and operational processes.

Key Responsibilities

Cybersecurity Architecture & Risk Management

• Conduct STARS (Security Threat Architecture Reviews) across various technology solutions.
• Evaluate and assess the security posture of connected solutions and embedded technologies.
• Identify, track, and manage security risks, issues, and vulnerabilities across platforms.
• Develop and execute strategies to remediate vulnerabilities and reduce cyber risk.

Secure Development & DevSecOps

• Support the implementation of secure software development lifecycle (Secure SDLC) practices.
• Work with engineering teams to integrate security into CI/CD pipelines.
• Ensure security requirements are embedded into solution architecture and development processes.
• Perform security architecture reviews and recommend improvements.

Connected Asset & Embedded Systems Security

• Provide security expertise for connected assets, IoT, and embedded systems environments.
• Ensure appropriate defense-in-depth security strategies are implemented across systems.
• Support security initiatives related to Caterpillar’s MineStar technology platform.

Governance, Compliance & Standards

• Ensure alignment with cybersecurity frameworks and standards including:
• EU-CRA
• ISO 27001
• NIST CSF
• NIST 800-82
• ISA 62443
• OWASP
• Support preparation for upcoming regulatory and security compliance requirements.
• Provide expertise in cyber governance, risk, and compliance (GRC) activities.

Security Monitoring, Metrics & Reporting

• Develop and maintain security dashboards and reporting tools (Power BI preferred).
• Track and report key cybersecurity metrics to stakeholders.
• Provide visibility into the security status of multiple technology platforms and solutions.

Collaboration & Leadership

• Partner with business and engineering teams to understand technology strategies and security challenges.
• Communicate security concepts effectively to technical and non-technical stakeholders.
• Participate in working groups and provide guidance on secure architecture and design practices.

Required Qualifications

Education

• Bachelor’s degree with 10+ years of relevant cybersecurity or security engineering experience
  OR
• Master’s degree with 8+ years of relevant experience

Core / Non-Negotiable Skills

Candidates must have strong experience in the following areas:

• Connected Assets Security or Embedded Systems Security (IoT / OT environments)
• Application Security
• Power BI OR strong vulnerability management experience

Technical Expertise

Experience with several of the following areas is expected:

• Secure Software Development Lifecycle (Secure SDLC)
• DevSecOps and CI/CD pipeline security
• Threat modeling and risk analysis
• Vulnerability assessment and remediation
• Identity and Access Management (IAM)
• API and Web Services security
• Networking concepts across on-premise and cloud environments
• Embedded systems security
• Application architecture and DevOps tooling
• Cloud security and service deployment
• Defense-in-depth security strategies

Preferred Qualifications

Certifications

One or more professional security certifications are highly preferred:

• CISSP
• CCSP
• CSSLP
• SANS Certifications (GPEN, GWEB, etc.)
•  

Additional Preferred Skills

• Experience in OT environments
• Software development experience
• Project or change management experience
• Strong analytical and reporting skills