Cybersecurity Manager

Career Area:

Technology, Digital and Data

Job Description:

Your Work Shapes the World at Caterpillar Inc.

When you join Caterpillar, you're joining a global team who cares not just about the work we do – but also about each other.  We are the makers, problem solvers, and future world builders who are creating stronger, more sustainable communities. We don't just talk about progress and innovation here – we make it happen, with our customers, where we work and live. Together, we are building a better world, so we can all enjoy living in it.

Cybersecurity Manager – SIEM, Detection & Security Analytics

We’re looking for a proven Cybersecurity Manager to lead and evolve our SIEM, detection, and security analytics capabilities. In this high-impact leadership role, you’ll lead a strong team, shape strategy and execution across enterprise logging and analytics, and partner across IT and Cybersecurity to improve detection coverage, platform resilience, and governance outcomes.

What You Will Do:

• Lead the SIEM function end-to-end, driving scalable ingestion, enrichment, correlation, search performance, and detection content that increases enterprise visibility and response readiness.

• Advance analytics engineering across detection engineering, anomaly detection, and AI/ML-assisted analytics to improve prioritization, surface earlier risk signals, and automate manual work.

• Own the roadmap for SIEM, analytics, and log data platforms, with clear accountability for availability, ingest health, data quality, and detection effectiveness.

• Ensure alignment with security policies, controls, and regulatory requirements; partner with GRC and audit to maintain audit readiness, evidence collection, and remediation plans.

• Build, coach, and inspire a high-performing multidisciplinary team with clear expectations, strong operating rhythms, and a culture of ownership and continuous improvement.

• Hire, onboard, and manage performance for the team (goals, coaching, feedback, and development plans)

• Plan team capacity and on-call coverage, and establish runbooks, incident/problem management rhythms, and service reporting.

• Develop business cases and manage budgets for owned products and services, tracking KPIs that connect investment to risk reduction and service outcomes.

• Lead vendor relationships and platform partnerships to maximize service quality, support internal SLA expectations, and keep the team aligned to emerging threats, tools, and industry best practices.

• Lead the team in continuous innovation and process efficiencies.

• Equip incident responders with high-fidelity telemetry and analytics and continuously raise the bar on data quality and detection performance.

What You Have:

• Deep cybersecurity experience spanning security operations, compliance, and secure enterprise technology practices.

• Proven leadership with success hiring, coaching, and developing high-performing technical talent.

• Firsthand experience deploying and operating SIEM platforms and log/data lake solutions at scale.

• Strong log engineering background in collection, parsing, normalization, enrichment, and large-scale data handling.

• Broad technical knowledge of endpoints, servers, networking, security controls, and cloud/hybrid environments.

• Working knowledge of security frameworks, audits, and regulatory requirements, including NIST, ISO 27001, CIS, SOC 2, and SOX.

• Executive-ready communication skills with the ability to influence technical teams, senior leaders, and cross-functional stakeholders.

• Comfortable supporting an on call/after-hours schedule as needed (occasional nights/weekends/holidays).

• Bachelor’s degree in computer science, Information Systems, Cybersecurity or related field (or equivalent practical experience).

• Experience with detection engineering, event correlation, threat monitoring, and AI/ML-assisted security analytics.

• Strong stakeholder and program leadership skills, with a history of delivering complex cross-functional security and IT initiatives.

• Experience partnering with audit and compliance teams to meet policy and regulatory requirements and drive remediation.

• Operational mindset with a focus on service reliability and continuous security improvement.

• Ability to balance delivery speed with cybersecurity risk management and governance.

• Ability to lead multidisciplinary teams and establish effective operating rhythms.

• Strong cross-functional partnership skills