Autonomy Platform Cybersecurity Engineering Lead（自动驾驶平台网络安全技术专家）
Caterpillar21 hours ago
Wuxi, China or Shanghai, ChinaStaff+
Responsibilities
- Translate company- and system-level cybersecurity architecture, requirements, and principles into product requirements, technical tasks, and acceptance criteria.
- Design and maintain platform and application security controls covering identity, authorization, least privilege, keys, certificates, communications, data, configuration, and auditing.
- Lead security capability development and integration across backend applications, field systems, cloud platforms, edge platforms, APIs, and microservices.
- Build and improve the secure development lifecycle, including static analysis, open-source analysis, secrets scanning, container and image scanning, SBOM, and secure CI/CD gates.
- Conduct threat modeling, attack-surface analysis, critical-asset identification, and trust-boundary analysis, converting risks into engineering requirements.
- Organize SAST, DAST, pre-release security validation, penetration-testing support, and end-to-end vulnerability remediation and verification.
- Implement access control, sensitive-data protection, data-use boundaries, and auditing for data platforms and AI-agent applications.
- Design safeguards for prompt injection, unauthorized tool calls, sensitive-data leakage, and uncontrolled automated actions, including human approval and takeover mechanisms.
- Drive security configuration and engineering controls for cloud platforms, Kubernetes, containers, Linux edge systems, and connected services in weak-network and offline environments.
- Provide cybersecurity engineering guidance and technical support to multiple development teams while promoting reusable security components and services.
Requirements
- Bachelor’s degree or higher in cybersecurity, computer science, software engineering, automation, electronic engineering, or a related field.
- At least 8 years of experience in product security, software security, cloud and platform security, or cybersecurity engineering.
- Practical experience designing, developing, integrating, and delivering security for complex software platforms.
- Experience with threat modeling, security testing, vulnerability management, and building security tooling for development organizations.
- Ability to translate high-level security requirements into architecture, interfaces, code, configuration, testing, and executable engineering tasks.
- Familiarity with API, microservices, Kubernetes, container, Linux, cloud-platform, and edge-system security.
- Knowledge of identity and access management, public key infrastructure, certificate and key management, encrypted communications, secrets management, audit logging, and zero trust.
- Strong technical leadership and cross-team influence, with the ability to lead security engineering implementation across multiple development teams.
- Strong Chinese and English technical communication and documentation skills.
- Preferred: experience with industrial software, industrial IoT, smart mining, autonomous-driving backend systems, digital twins, remote operations platforms, cloud-native security, edge security, or industrial cybersecurity.
- Preferred: familiarity with IEC 62443, the NIST Cybersecurity Framework, ISO 27001, software supply-chain security, SBOM, open-source dependency governance, container and artifact security, secure release practices, or AI-agent security.
- Preferred certifications include CISSP, CCSP, CSSLP, GIAC, or comparable professional certifications.
Benefits
- Equal Opportunity Employer; qualified applicants of any age are encouraged to apply.
- Posting period: October 26, 2026 through November 19, 2026.
Tech Stack
Categories
About Caterpillar
Caterpillar Inc. designs, manufactures, and services construction and mining equipment, diesel and natural gas engines, industrial gas turbines, and diesel-electric locomotives for infrastructure, resource, and energy customers. The public company, founded in 1925 and headquartered in Irving, Texas, sells primarily through an independent worldwide dealer network and provides equipment financing. It operates through Construction Industries, Resource Industries, and Energy & Transportation segments, with shares traded on the NYSE and Euronext Paris.