Cybersecurity Engineer– AI Security

About this role

Cybersecurity Engineer – AI Security Analyst

Openings:
2

Duration:
12 Months

Location:
100% Remote

Position Overview

Caterpillar is seeking a
Cybersecurity Engineer 3 – AI Security Analyst
to strengthen application security across the software development lifecycle. This role will perform security assessments, vulnerability analysis, remediation, secure code review, and security automation across applications, APIs, cloud workloads, repositories, and infrastructure.

The ideal candidate will bring strong
Application Security / DevSecOps
experience, hands-on knowledge of security scanning and vulnerability management, and the ability to work with
Java and Python code
. Experience using
AI-assisted security tools
to improve threat modeling, code review, vulnerability validation, and remediation is highly valuable.

Key Responsibilities

- Embed
application security practices into the SDLC
, including security standards, workflows, processes, and Definition of Done criteria.
- Perform application, API, cloud, repository, and infrastructure security assessments using traditional and
AI-assisted security techniques
.
- Manage
SAST, SCA, secret scanning, dependency analysis, and infrastructure security scanning
.
- Use
GitHub Advanced Security, CodeQL, Burp Suite
, and other approved security tools to identify and validate vulnerabilities.
- Analyze and prioritize findings based on
exploitability, severity, business impact, compensating controls, and remediation requirements
.
- Drive vulnerabilities from discovery through
remediation, retesting, evidence collection, and verified closure
.
- Identify and reduce
security debt, dependency vulnerabilities, open-source risks, and software supply-chain exposure
.
- Perform manual security testing, secure code review, API testing, and vulnerability validation.
- Apply
**OWASP Top 10, API Security Top 10, authentication/authori...