{"id":1122168,"url":"https://alion.io/job/caterpillar-senior-application-security-engineer","title":"Senior Application Security Engineer","company":{"id":176554,"name":"Caterpillar","domain":"caterpillar.com","url":"https://alion.io/company/caterpillar","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":84,"open_postings":32,"ghost_share":0,"stale_share":0.844,"repost_share":0,"time_to_fill_p50_days":12,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chicago, United States","Peoria, United States","Irving, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":112710,"max":183140,"currency":"USD","period":"year","gross":null,"usd_annual":183140},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CodeQL","optional":false},{"name":"CWE","optional":false},{"name":"GCP","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP Top 10","optional":false}],"status":"live","first_seen_at":"2026-09-22T19:29:43Z","employer_posted_date":"2026-09-22","last_verified_at":"2026-10-17T06:11:28Z","board_verified":true,"closed_at":null,"days_open":24,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":24},"description":"Career Area:\nTechnology, Digital and DataJob Description:\nYour Work Shapes the World at Caterpillar Inc.\nWhen you join Caterpillar, you're joining a global team who cares not just about the work we do - but also about each other. We are the makers, problem solvers, and future world builders who are creating stronger, more sustainable communities. We don't just talk about progress and innovation here - we make it happen, with our customers, where we work and live. Together, we are building a better world, so we can all enjoy living in it.\nJob Summary:\nJoin the Cybersecurity team of Cat Digital and build software solutions that drive automation and security into the application development lifecycle. You will have deep integration with applications as they move from an idea into a solution, integrating Security and DevOps practices and enabling delivery for Caterpillar Digital Applications. Be a part of the team that is using innovative solutions and methods to securely enable, build, and deploy modern applications and software.\nThis role is an excellent opportunity for an experienced software engineer with a passion for cybersecurity to move to a full-time cybersecurity role and help their fellow software engineers deliver solutions securely.\nWhat You Will Do:\nAs a Senior Application Security Engineer, you will work as a technical engineer within a portfolio of related applications to guide software engineers on cybersecurity issues, influence security and prioritization decisions at the bug or story level, and act a trusted partner in their mission to deliver solutions securely.\nSecurity Defect Management - Analyzing, validating, communicating, and consulting on security defects identified by both automated and manual sources such as CodeQL, Rapid7 Web Application Security, penetration testing, bug bounty, etc. In other words, our security engineers are partners to software engineers who require accurate information on why a vulnerability exists and what they can do about it.\n Engineering Consultin g - Serving as a “best friend” to software engineers, architects, product owners, and leaders, provide contextually-aware guidance to help these groups make good decisions, document those decisions and resulting architectures, and navigate relevant review & approval processes (where necessary) when implementing new features and remediating existing issues.\n Tool Enablement - Enabling and monitoring automated defect detection tooling (CodeQL, Rapid7, etc.) at the repository or application level according to established process.\nSecurity Test Onboarding & Management - Collecting and communicating required scope and access information for penetration testing and security assurance assessments, as well as handling the output of these assessments via our Defect Management Process.\nMaturity Measurement - Consulting with software engineers on practices which will improve their application’s security maturity according to scorecards and maturity models established by Cat Digital.\nCorrection of Error - Authoring, in close partnership with software engineers, correction of error reports which help engineers and architects across Cat Digital avoid similar mistakes in their own applications.\nWhat You Will Have:\nDecision Making and Critical Thinking: Knowledge of the decision-making process and associated tools and techniques; ability to accurately analyze situations and reach productive decisions based on informed judgment.\nEffective Communications: Understanding of effective communication concepts, tools and techniques; ability to effectively transmit, receive, and accurately interpret ideas, information, and needs through the application of appropriate communication behaviors.\nSoftware Development Life Cycle: Knowledge of software development life cycle; ability to use a structured methodology for delivering and managing new or enhanced software products to the marketplace.\nSoftware Integration Engineering: Knowledge of software integration processes and functions; ability to design, develop and maintain interfaces and linkage to alternative platforms and software packages.\nSoftware Product Design/Architecture: Knowledge of software product design; ability to convert market requirements into the software product design.\nTop Candidates Will Have:\nExperience as a software engineer (in any language or framework); prefer a focus on cybersecurity related issues\nExperience working on a major cloud platform (AWS, Azure, GCP, or Salesforce) as a software engineer, cloud/DevOps engineer, security engineer, or architect.\nExperience analyzing and remediating security findings from automated and manual sources such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), penetration testing, Software Composition Analysis (SCA), etc.\nExperience leveraging one or more of the following resources to support secure coding and decision-making:OWASP Top 10\nMITRE Common Weakness Enumeration (CWE) Top 25\nOWASP Application Security Verification Standard (ASVS)\nOther industry-standard best practice guides or frameworks\n\nExperience building or supporting web applications and API’s including Single Page Applications (SPA) and RESTful APIs.\nProfessional certifications in either cybersecurity or software engineering, such as:Associate or Professional-level certifications from a major cloud provider (AWS, Azure, GCP, or Salesforce).\nCompTIA Security+, Cloud+, CCSK, and/or other cybersecurity certifications.\nISC2 Certified Software Lifecycle Professional (CSLP)\n\nAdditional Details:\nThis position requires the candidate to be based in either Chicago, IL; Peoria, IL or Dallas, TX\nRelocation assistance is NOT available for this position\nVisa sponsorship is NOT available with this position.\nSummary Pay Range:\n$112,710.00 - $183,140.00Compensation and benefits offered may vary depending on multiple individualized factors, job level, market location, job-relatedknowledge, skills, individual performance and experience. Please note that salary is only one component of total compensation at Caterpillar.\nBenefits:\nSubject to plan eligibility, terms, and guidelines. This is a summary list of benefits.\nMedical, dental, and vision benefits*\n\nPaid time off plan (Vacation, Holidays, Volunteer, etc.)*\n\n401(k) savings plans*\n\nHealth Savings Account (HSA)*\n\nFlexible Spending Accounts (FSAs)*\n\nHealth Lifestyle Programs*\n\nEmployee Assistance Program*\n\nVoluntary Benefits and Employee Discounts*\n\nCareer Development*\n\nIncentive bonus*\n\nDisability benefits\n\nLife Insurance\n\nParental leave\n\nAdoption benefits\n\nTuition Reimbursement\n\n* These benefits also apply to part-time employees\nVisa Sponsorship is not available for this position.Posting Dates:\nSeptember 22, 2026 - October 4, 2026Any offer of employment is conditioned upon the successful completion of a drug screen.\nCaterpillar is an Equal Opportunity Employer, Including Veterans and Individuals with Disabilities. Qualified applicants of any age are encouraged to apply.\nNot ready to apply? Join our Talent Community.","description_format":"text","description_chars":7066,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Life insurance","Parental leave","Relocation assistance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Texas","iso":null,"kind":"city"},{"name":"Illinois","iso":null,"kind":"city"}],"hiring_excludes":[],"relocation_offered":true,"industries":["Application Security","Manufacturing","Fossil Fuels","Industrial Machinery"],"lifecycle":[{"event":"open","at":"2026-10-14T02:00:51Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 343 · green card filings: 92","filings_12m":343,"filings_prev_12m":364,"green_card_filings_12m":92,"median_offered_wage_usd":114569,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":11}],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.426,"p_room":0.35,"age_days":24,"expected_fill_days":12,"reasons":["conf:4","stale_co","velocity","win:tail","comp:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":183140,"is_top_pay":true},"html_url":"https://alion.io/job/caterpillar-senior-application-security-engineer","json_url":"https://alion.io/job/caterpillar-senior-application-security-engineer.json","meta":{"generated_at":"2026-10-17T14:23:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19413,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":176554},"rest":"https://alion.io/mcp/rest/get_company?id=176554"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcaterpillar-senior-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcaterpillar-senior-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcaterpillar-senior-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/caterpillar-senior-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcaterpillar-senior-application-security-engineer"}]}