Senior Cyber Security Engineer
Posted Updated
Description
Berkshire Hathaway Homestate Companies, Workers Compensation Division, is looking for a Senior Cyber Security Engineer to join its IT Security team! This technical professional will assist in developing, implementing, communicating, and executing the Enterprise Security services and cyber security program, with emphasis on securing the software development lifecycle, cloud and AI enabled systems, and security operations. This individual will work closely with key business partners, internal technology teams, and external vendors to research, deploy, and configure technologies and processes that strengthen the defenses of the enterprise.
ESSENTIAL RESPONSIBILITIES AND PRINCIPAL ACCOUNTABILITIES
- Develop repeatable security architectures working with internal and external partners.
- Contribute to the development of an Agile methodology architecture, ensuring that security practices are implemented in a repeatable fashion.
- Design, implement, and maintain DevSecOps pipelines, embedding automated security testing (SAST, DAST, SCA, container/image scanning) and policy-as-code gates into CI/CD workflows.
- Partner with development teams to advance application security practices, including secure code review, threat modeling, and remediation of vulnerabilities identified through static and dynamic testing.
- Evaluate risk and protect applications and infrastructure against new and emerging threats/threat actors.
- Document and diagram administrative and technical controls for systems and architectures.
- Integrate security within various cloud service models (e.g., IaaS, PaaS, SaaS) and identify appropriate security solutions for each implementation.
- AI & Agent Security: Develop and apply expertise in the OWASP LLM Top 10 and related AI/agent threat models. Design and contribute to non-human identity (NHI) and AI agent identity and access management (IAM) policies. Monitor AI agent behavior for anomalous or unauthorized activity and respond to AI specific security incidents (e.g., prompt injection, data, exfiltration, model misuse).
- AI Fluency & AI Integration: Maintain working fluency with AI assistant tools as part of standard security workflows, using AI to accelerate threat report analysis, detection rule generation, and security documentation. Evaluate and responsibly apply AI tools to improve team efficiency while maintaining appropriate human review and data handling controls.
- Perform as a subject matter expert and contribute to the development of company security standards and procedures
- Lead efforts to document and present risks and security issues that could impact the confidentiality, integrity and/or availability of the business, both internally and externally.
- Support and continuously improve Security Operations Center (SOC) functions, including monitoring, detection engineering, and case management.
- Design and implement security automation and orchestration (SOAR) to streamline alert triage, investigation, and incident response workflows to reduce manual effort.
- Conduct incident response using Endpoint Detection and Response (EDR) tools and processes.
- Perform threat hunting and share current threat information.
- Perform vulnerability validation using security scanners, CVE data, and CVSS scoring.
- Perform host and network forensics, including log event analysis, packet capture (PCAP) review, and identification of indicators of compromise (IOCs).
- Actively participate in annual cyber exercises (identification, response, recovery).
- Remain knowledgeable about security issues, vulnerabilities, regulatory and legal changes, and standards that may impact network security, cyber security, AI governance, and compliance.
- Actively share expertise and mentor junior members of the team.
QUALIFICATIONS
- EDUCATION: Bachelor’s degree in Information/Cyber Security, Information Risk, Information Risk Management, Information Systems, Computer Science, Information Management, or related discipline strongly preferred.
- LICENSES AND CERTIFICATIONS: A minimum of one certification in the following, which must be currently maintained and valid:
- Certified Information Systems Security Professional (CISSP)
- Certified Cloud Security Professional (CCSP)
- Certified Information Security Manager (CISM)
- Certified in Risk and Information Systems Control (CRISC)
- GIAC Certified Incident Hacker (GCIH)
- Advanced Degree in InfoSec
- Microsoft Certified: Cloud and AI Security Engineer, Associate Cybersecurity Architect Expert, or Azure Solutions Architect Expert.
- Preferred: Certifications relevant to DevSecOps, cloud security, application security (e.g., GWEB, GCSA, AWS/Azure Security Specialty, OSCP), or emerging AI security.
- EXPERIENCE:
- Minimum of eight (8) years of experience in Cloud Security, IT Security, or Security Operations required.
- Experience using security tools such as Security Incident and Event Management (SIEM), vulnerability scanners, Endpoint Detection and Response (EDR), security auditing tools, and web application firewalls required.
- Experience with SOC operations, including incident response, alert triage, case management, and use of SOAR or automation platforms to streamline detection and response.
- Experience integrating security into CI/CD pipelines and DevSecOps practices, including secure code scanning, dependency/vulnerability scanning, and infrastructure-as-code security.
- Experience with one or more of the following cyber security domain areas: incident response and management, application awareness, identity awareness, identity and access management, data handling and classification, web application firewalls, next-gen firewalls, network zoning and segmentation, cyber resiliency, secure coding, fraud investigation and response, multi-factor authentication, DLP, forensics, BCP/DR, and security within SDLC.
- TECHNICAL KNOWLEDGE/SKILLS:
-
- Solid understanding of generally applicable and accepted auditing standards and frameworks (e.g., NIST, CIS, OWASP)) and best practices for IT services management (e.g., ITIL), government guidelines and laws (e.g., Sarbanes-Oxley) required.
- Solid understanding of network systems, cloud and application security, with scripting proficiency in Python and PowerShell required.
- Working knowledge of AI/LLM security risks (e.g., OWASP LLM Top 10) and non-human identity/agent IAM concepts required. Demonstrated fluency using AI assistant tools for security analysis, documentation, or detection engineering preferred.
- Expertise applying regulatory requirements such as the California Consumer Privacy Act (CCPA), General Data Protection Regulation (GDPR), HIPAA, SOX IT, General Computer Controls (GCC), and FCC required.
- Additional domain knowledge in the following areas:
- DevSecOps: CI/CD security integration, container and Kubernetes security, infrastructure-as-code (Terraform, ARM), security scanning, software supply chain security (SBOM, dependency management).
- Application Security: secure SDLC, threat modeling, SAST/DAST/SCA tooling, API security, secure code review.
- AI & Agent Security: OWASP LLM Top 10 threat models, non-human identity (NHI) and AI agent IAM policy design. AI behavioral monitoring, securing AI/LLM platform integrations, model and prompt-level risk assessment.
- AI Fluency: practical, hands-on proficiency using AI assistant tools to support day-to-day security work, including threat report analysis, detection rule generation, and security documentation, with sound judgment on appropriate use, data handling, and human review.
- SOC Operations & Automation: incident response, detection engineering, SIEM/SOAR administration, playbook and SOP development, alert triage optimization, and metrics and reporting for security operations.
- MATH AND REASONING ABILITY: Able to solve practical problems and deal with a variety of variables in situations where only limited standardization exists. Able to interpret a variety of instructions furnished in written, oral, diagram, or schedule form. Able to apply concepts such as addition, subtraction, multiplication, division, fractions, percentages, ratios, and proportions to practical situations.
- CRITICAL THINKING: Ability to think critically and adapt quickly in a flexible and dynamic environment. Proactive and inquisitive approach to work. Ability to derive appropriate conclusions from disparate data points from various sources and apply effectively.
- LANGUAGE ABILITY: Ability to read, analyze, and interpret general business periodicals, professional journals, technical procedures, or governmental regulations. Ability to write reports, business correspondence, and procedure manuals. Ability to effectively present information and respond to questions from groups of managers, clients, customers, and the general public.
-
NEEDED COMPETENCIES
- ANALYTICAL THINKING: Collects, analyzes, and synthesizes data and information from diverse sources that is often complex, voluminous and technical. Spots issues and detects gaps in available information. Uses intuition and experience to enhance understanding and interpretation of data. Determines the costs and benefits of alternative courses of action.
- COMMUNICATION AND COLLABORATION: Effective communicator with strong interpersonal and communication skills. Communicates clearly and appropriately using effective verbal, listening, reading and writing skills. Asks questions freely to broaden knowledge and skills. Ability to successfully build relationships and adapt communication style across various environments. Listens and requests clarification. Appropriately responds to and resolves complex situations or problems. Responds well to feedback. Demonstrates effective group presentation and facilitation skills; contributes effectively in meetings with technical and non-technical stakeholders. Meets commitments.
- CREATIVITY AND INNOVATION: Creates new ideas, solutions or approaches to challenges. Seeks inspiration from unconventional sources. Solicits feedback from others on new ideas. Solves complex problems by developing new approaches. Takes calculated risks and understands and works around restraints.
- RESULTS ORIENTATION: Ability to create, implement, evaluate and enhance internal control processes. Balances resources and constraints. Routinely delivers results at a higher level than anticipated (e.g., efficiency, quality). Is frequently assigned to high-profile or challenging projects to achieve results. Attains goals despite resource limitations or adverse, challenging, or changing circumstances.
WHAT WE OFFER
- Work From Home Program (up to 2 days per week upon eligibility)
- Modern Office Setting
- Free On-Site Fitness Facility
- Free On-Site Garage Parking
- Paid Time Off
- Paid Holidays
- Retirements Savings Match
- Group Health Insurance (Medical, Dental, and Vision)
- Hospital Indemnity Insurance
- Life and AD&D Insurance
- Long Term Disability Insurance
- Accident and Critical Illness Insurance
- Flexible Savings Accounts
- Paid Community Volunteer Day
- Employee Assistance Program
- Tuition Reimbursement Program
- Employee Referral Program
- Diversity, Equity and Inclusion Program
ABOUT US
With more than 50 years in business, BHHC has grown from a regional organization to a national insurance group, offering insurance products from coast to coast. Relationships are the cornerstone of our culture, and we believe in doing the right thing. That means we invest in our business in every way possible to deliver on our mission and demonstrate that people are what powers our success. Our commitment to financial strength and integrity means our customers can rest assured that we will be there when it counts.
At BHHC we embrace diversity and foster an environment where our people can be their authentic selves. Our differences make us stronger and better together, which fosters a harmonious workplace—something we truly value. We’ve created an approachable and collaborative atmosphere. Here you’ll find a welcoming workplace where everyone can feel valued, supported, and inspired to do great work. Together, we raise the bar by being curious, remaining customer-focused, and operating with integrity.
Skills
- Agile
- AI
- API
- Api Security
- Authentication
- Automation
- AWS
- Azure
- Ccpa
- CI/CD
- Cism
- Cissp
- Cloud
- Cloud Security
- Cybersecurity
- DAST
- DevSecOps
- DLP
- EDR
- Firewall
- Gdpr
- Hipaa
- IaaS
- IAM
- Infrastructure as Code
- ITIL
- Kubernetes
- LLM
- Network Security
- Nist
- OWASP
- PowerShell
- Python
- REST Assured
- Risk Assessment
- SaaS
- SAST
- SBOM
- SDLC
- Secure Coding
- SIEM
- Terraform
- Threat Hunting
- Threat Modeling
- Vulnerability Scanning
As published by lever · 29 questions · 1 written answer
Basics
Resume/CV, Full name, Email, Phone, Current location, Current company, LinkedIn URL, GitHub URL, Portfolio URL, Other website
Short answers (11)
- If yes, please specify the reasons. It is not necessary for you to identify unavailability for work because of religious observance or practice, disability or medical condition, or any other protected classification. Subsequent to any job offer, we will consider whether a reasonable accommodation can be made. optional
- Available Start Date
- Salary/Rate Desired
- If applicable, please provide additional information. optional
- Current or Most Recent Employer - Company Name optional
- Current or Most Recent Employer - Dates of Employment optional
- Current or Most Recent Employer - Job Title optional
- Previous Employer - Company Name optional
- Previous Employer - Dates of Employment optional
- Previous Employer - Job Title optional
- Full Legal Name
Pick from a list (16)
- We are an Equal Opportunity Employer. All persons shall have the opportunity to be considered for employment without regard to their actual or perceived race, color, creed, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth and related medical conditions), gender identity or expression (including transgender status), sexual orientation, marital status, military and veteran status, physical or mental disability, protected medical condition as defined by applicable state or local law, genetic information or any other characteristic protected by applicable federal, state or local laws and ordinances. We will endeavor to make a reasonable accommodation to the known physical or mental limitations of a qualified applicant with a disability unless the accommodation would impose an undue hardship on the operation of our business. If you believe you require such assistance to complete this form or to participate in an interview, please let us know. optional
- Please review the California Consumer Privacy Act Notice through this provide link: https://www.bhhc.com/legal-policies/california-privacy-policy/ optional
- Pursuant to the Immigration Reform and Control Act of 1986, all applicants who are offered employment must produce documents establishing their identity and authorization for employment in the United States. These documents must be produced no later than three (3) business days after employment commences. In addition, all new hires will be required to verify their employment authorization under oath by signing INS Form I-9 upon commencing employment. Are you legally allowed to work in the United States?
- Will you now or in the future require Oak River Insurance Company to commence ("sponsor") an immigration case in order to employ you (for example, H-1B or other employment-based immigration case)? This is sometimes called "sponsorship" for an employment-based visa status.
- If you are under 18 years of age, do you have a work permit if required by applicable state law?
- Is there anything that would prevent you from working any day or time of the week or prevent you from regularly working overtime?
- How did you hear about this job? optional
- If applicable, please select job board optional
- Education Verification optional
- Current or Most Recent Employer - Reason for Leaving optional
- Current or Most Recent Employer - Ok to Contact? optional
- Previous Employer - Reason for Leaving optional
- Previous Employer - Ok to Contact? optional
- I have read and fully understand the questions asked in this application. I certify that all of the answers I have given are true, accurate and complete. I understand that the omission and/or misrepresentation of any fact from or on this application or during any interview will result in immediate rejection of my application or if I am hired will be cause for immediate dismissal. Unless I noted otherwise, I authorize the Company to independently contact all my employment references and personal references, as well as the education institutions I have attended. I further authorize the Company to independently inquire about, investigate and obtain copies of any records which relate to me from my former employers and educational institutions. optional
- If hired, I understand that I will be required to abide by all of the rules and regulations of the Company. I understand and agree that nothing in this application shall constitute an offer, a contract or a guarantee of employment for a specific period of time. If hired, I understand that my employment may be terminated with or without cause and with or without notice at any time, at the will of the Company or me. I further understand that no representative or agent of the Company, other than the President as the authority to enter into any agreement for employment, on an individual or collective basis, for any specific period of time, or to make an agreement contrary to the foregoing. I also understand that any agreement modifying at-will employment status, on an individual or collective basis, must be in writing and signed by the President. In addition, I understand that the Company and all plan administrators shall have the maximum discretion permitted by law to administer, interpret, modify, discontinue, enhance or otherwise change all policies, procedures, benefits or other terms and conditions of employment. optional
- I understand the Company may obtain, without using the services of a third party investigative consumer reporting agency, public records pertaining to my character, general reputation, personal characteristics or mode of living during its evaluation of my application for employment and, if employed, during my employment. By checking the following box, I waive my right to receive copies of public records obtained by the Company. optional
Written answers (1)
- Full Residential Address
Attachments (1)
- Optional Cover Letter optional