Caterpillar Inc.
Application Security Engineer
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Caterpillar Inc.
Caterpillar Inc. is the leading manufacturer of construction and mining equipment, as well as off-highway diesel and natural gas engines, industrial gas turbines, and diesel-electric locomotives. Established in 1925 from the merger of Holt Manufacturing Company and C.L. Best Tractor Company, Caterpillar has a rich history that dates back to the 19th century with innovations in agricultural equipment. The company offers a wide range of products, including track-type tractors, bulldozers, motor graders, and off-highway trucks. Caterpillar also produces diesel and natural gas engines, gensets, marine engines, and hydraulic components. Their equipment plays a crucial role in infrastructure projects globally, supporting road building, dams, and mining operations. Caterpillar is committed to innovation and sustainability, with a strong presence in over 190 countries through a network of more than 170 dealers.
Security at Caterpillar Inc.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Caterpillar's AppSec mission focuses on 'integrating Security and DevOps practices and enabling delivery for Caterpillar Digital Applications.' The team positions itself as a 'best friend' to software engineers and architects rather than a traditional gatekeeper.
- Their risk philosophy is explicitly 'risk-based,' focusing on standards-based processes to validate the security of connected solutions.
Security Team
- The cybersecurity program is overseen by the CIO, Jamie L.
- Key leadership includes Eric Sporre (VP & Global CISO) and Steven Hernandez (Deputy CISO).
- The team is described as 'cross-functional.' As of February 2026, there are approximately 25-35 AppSec-related profiles on LinkedIn, with at least one active job posting for an Application Security Engineer.
Key Initiatives
Caterpillar practices 'Shift Left' by building software solutions that drive automation and security into the development lifecycle, specifically through tool enablement like CodeQL and Rapid7. Their vulnerability management involves analyzing and consulting on defects found via scanners, penetration testing, and bug bounties. There is no public evidence of a formal 'Security Champions' program.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.