Disaster Recovery Specialist

Career Area: Business Technologies, Digital and Data

Job Description:

Your Work Shapes the World at Caterpillar Inc.

When you join Caterpillar, you're joining a global team who cares not just about the work we do - but also about each other.

We are the makers, problem solvers, and future world builders who are creating stronger, more sustainable communities.

We don't just talk about progress and innovation here - we make it happen, with our customers, where we work and live.

Together, we are building a better world, so we can all enjoy living in it.

We are seeking a Technology Resilience Analyst to join our world-class cybersecurity team.

The role will have two main functions, IT Disaster Recovery and Cybersecurity Incident Response.

As an IT Disaster Recovery Coordinator, the successful candidate will be responsible for developing, implementing, and managing disaster recovery plans and procedures to ensure the continuity of critical IT services in the event of a disruption.

This role requires a proactive individual with strong problem-solving skills and the ability to work collaboratively with various departments to safeguard our IT infrastructure.

As a Cybersecurity Incident Response Analyst, the successful candidate will be responsible for identifying, analyzing, and responding to cybersecurity incidents to minimize their impact and prevent future occurrences.

This role requires a detail-oriented individual with strong analytical skills and the ability to work under pressure in a fast-paced environment.

Responsibilities

Disaster Recovery

Develop and maintain comprehensive disaster recovery plans and procedures.

Conduct risk assessments and business impact analyses to identify critical IT systems and processes.

Coordinate and conduct regular disaster recovery testing and drills to ensure preparedness.

Collaborate with IT and business units to develop recovery strategies and solutions.

Monitor and evaluate the effectiveness of disaster recovery plans and make necessary adjustments.

Provide training and guidance to staff on disaster recovery procedures and best practices.

Ensure compliance with industry standards and regulatory requirements related to disaster recovery.

Maintain documentation of disaster recovery plans, procedures, and test results.

Assist in the development and implementation of business continuity plans.

Incident Response

Monitor and analyze security alerts and events to identify potential cybersecurity incidents.

Investigate and respond to security incidents, including malware infections, data breaches, and network intrusions.

Conduct forensic analysis to determine the root cause and extent of incidents.

Collaborate with IT and security teams to develop and implement incident response plans and procedures.

Document and report on security incidents, including findings, actions taken, and recommendations for improvement.

Stay up-to-date with the latest cybersecurity threats, vulnerabilities, and best practices.

Provide training and guidance to staff on incident response procedures and cybersecurity awareness.

Participate in regular incident response drills and exercises to ensure preparedness.

Assist in the development and implementation of security policies and controls.

Cover on-call shifts and early morning meetings as necessary.

Minimum Qualifications

3+ years of experience in IT disaster recovery and/or incident response role.

5+ years of experience in an information technology role.

Preferred Qualifications

Bachelor's degree in Information Technology, Computer Science, or a related field or equivalent experience.

Strong knowledge of disaster recovery planning, business continuity, and risk management.

Strong knowledge of cybersecurity threats, vulnerabilities, and attack vectors.

Experience with security information and event management (SIEM) tools and forensic analysis tools.

Experience with disaster recovery tools and technologies.

Excellent problem-solving and analytical skills.

Strong communication and interpersonal skills.

Ability to work independently and as part of a team.

Relevant certifications (e.g. Certified Business Continuity Professional (CBCP), Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), GIAC Certified Incident Handler (GCIH)).

Skill Descriptors

Cybersecurity Standards and Policies:

Knowledge of developing cybersecurity policies, standards and procedures; ability to develop and communicate policies, standards and procedures that guide interactions with customers.

Level Basic Understanding:

Collects documentation and information on standards and their usage.

Describes and follows all policies, standards and procedures.

Discusses the relevance of standards and policies for an OT environment.

Describes expected benefits of effective organizational cybersecurity policies, standards and procedures.

Application Security:

Knowledge of the tools and processes for maintaining application security; ability to design and implement security programs to prevent data loss and access intrusion from web and mobile applications.

Level Basic Understanding:

Identifies common application vulnerabilities and threats.

Describes the goals and objectives of application security.

Lists automated tools used for testing application security flaws.

Documents the processes and procedures of major application security activities.

Information Security Technologies :

Knowledge of technologies and technology-based solutions dealing with information security issues; ability to protect information security across the organization using encryption technologies and appropriate security software.

Level Basic Understanding:

Explains how a firewall restricts access to information resources.

Discusses why both user-IDs and passwords are required to manage access.

Identifies different types of technology used for information security purposes.

Describes basic types or groups of security software and hardware.

Information Technology (IT)

Security Policies :

Knowledge of IT security policies, standards, and procedures; ability to utilize a variety of administrative skill sets and technical knowledge to ensure cyber security compliance.

Level Working Knowledge:

Performs information gathering and research on key elements of IT security policies.

Assists senior colleagues in identifying and analyzing critical issues in IT security policies.

Executes IT security policies and standards within a specific region in organization.

Conducts performance reviews on implementation of IT security policies.

Generates status reports for senior management to ensure the implementation of IT security policies.

Requirements Analysis:

Knowledge of tools, methods, and techniques of requirement analysis; ability to elicit, analyze and record required business functionality and non-functionality requirements to ensure the success of a system or software development project.

Level Working Knowledge:

Follows policies, practices and standards for determining functional and informational requirements.

Confirms deliverables associated with requirements analysis.

Communicates with customers and users to elicit and gather client requirements.

Participates in the preparation of detailed documentation and requirements.

Utilizes specific organizational methods, tools and techniques for requirements analysis.

System and Technology Integration:

Knowledge of the features and facilities of systems; ability to integrate and communicate among applications, databases and technology platforms.

Level Basic Understanding:

Describes the basic concepts and issues of system and technology integration.

Illustrates the risks and benefits of technology integration projects.

Discusses major software, hardware or application integration initiatives and plans.

Explains system integration initiatives in own environment.

Technical Writing/Documentation:

Knowledge of technical writing; ability to write technical documents such as manuals, reports, guidelines or documents on standards, processes and applications.

Level Working Knowledge:

Implements technical documentation standards, guidelines and best practices.

Prepares written text and layout of materials according to required outlines and specifications.

Completes and maintains technical reference documents.

Uses the major features, functions and facilities of an automated documentation tool.

Coordinates and constantly updates system operations, installations, service manuals, and help documents.

Cyber Security:

Knowledge of network attacks and the defenses used; ability to defend and prevent electronic threats, theft and attacks.

Level Basic Understanding:

Cites examples of cyber attacks and fraud incidents and lessons learned.

Reviews common network attacks, attack methods and the defenses used.

Lists common tools and technologies for monitoring network intrusions.

Explains the use of forensics in addressing cyber crime.

Summary Pay Range:

$87, $131,184.00

Compensation and benefits offered may vary depending on multiple individualized factors, job level, market location, job-related knowledge, skills, individual performance and experience.

Please note that salary is only one component of total compensation at Caterpillar.

Benefits:

Annual incentive bonus plan*Medical, dental, and vision coverage

Paid time off plan (Vacation, Holiday, Volunteer, Etc.)

401k savings plan

Health savings account (HSA)

Flexible spending accounts (FSAs)

Disability benefits

Life Insurance

Parental leave

Healthy Lifestyle Programs

Employee Assistance Programs

Voluntary Benefits and Employee Discounts

Tuition Reimbursement

Career Development

*Subject to annual eligibility and incentive plan guidelines.

Posting Dates:

Any offer of employment is conditioned upon the successful completion of a drug screen.

EEO/AA Employer. All qualified individuals - Including minorities, females, veterans and individuals with disabilities - are encouraged to apply.

Not ready to apply? Join our Talent Community.