The posting
Berkshire Hathaway Homestate Companies, Workers Compensation Division, is looking for a Senior Cyber Security Engineer to join its IT Security team! This technical professional will assist in developing, implementing, communicating, and executing the Enterprise Security services and cyber security program, with emphasis on securing the software development lifecycle, cloud and AI enabled systems, and security operations. This individual will work closely with key business partners, internal technology teams, and external vendors to research, deploy, and configure technologies and processes that strengthen the defenses of the enterprise.
ESSENTIAL RESPONSIBILITIES AND PRINCIPAL ACCOUNTABILITIES
- Develop repeatable security architectures working with internal and external partners.
- Contribute to the development of an Agile methodology architecture, ensuring that security practices are implemented in a repeatable fashion.
- Design, implement, and maintain DevSecOps pipelines, embedding automated security testing (SAST, DAST, SCA, container/image scanning) and policy-as-code gates into CI/CD workflows.
- Partner with development teams to advance application security practices, including secure code review, threat modeling, and remediation of vulnerabilities identified through static and dynamic testing.
- Evaluate risk and protect applications and infrastructure against new and emerging threats/threat actors.
- Document and diagram administrative and technical controls for systems and architectures.
- Integrate security within various cloud service models (e.g., IaaS, PaaS, SaaS) and identify appropriate security solutions for each implementation.
- AI & Agent Security: Develop and apply expertise in the OWASP LLM Top 10 and related AI/agent threat models. Design and contribute to non-human identity (NHI) and AI agent identity and access management (IAM) policies. Monitor AI agent behavior for anomalous or unauthorized activity and respond to AI specific security incidents (e.g., prompt injection, data, exfiltration, model misuse).
- AI Fluency & AI Integration: Maintain working fluency with AI assistant tools as part of standard security workflows, using AI to accelerate threat report analysis, detection rule generation, and security documentation. Evaluate and responsibly apply AI tools to improve team efficiency while maintaining appropriate human review and data handling controls.
- Perform as a subject matter expert and contribute to the development of company security standards and procedures
- Lead efforts to document and present risks and security issues that could impact the confidentiality, integrity and/or availability of the business, both internally and externally.
- Support and continuously improve Security Operations Center (SOC) functions, including monitoring, detection engineering, and case management.
- Design and implement security automation and orchestration (SOAR) to streamline alert triage, investigation, and incident response workflows to reduce manual effort.
- Conduct incident response using Endpoint Detection and Response (EDR) tools and processes.
- Perform threat hunting and share current threat information.
- Perform vulnerability validation using security scanners, CVE data, and CVSS scoring.
- Perform host and network forensics, including log event analysis, packet capture (PCAP) review, and identification of indicators of compromise (IOCs).
- Actively participate in annual cyber exercises (identification, response, recovery).
- Remain knowledgeable about security issues, vulnerabilities, regulatory and legal changes, and standards that may impact network security, cyber security, AI governance, and compliance.
- Actively share expertise and mentor junior members of the team.
QUALIFICATIONS
- EDUCATION: Bachelor’s degree in Information/Cyber Security, Information Risk, Information Risk Management, Information Systems, Computer Science, Information Management, or related discipline strongly preferred.
- LICENSES AND CERTIFICATIONS: A minimum of one certification in the following, which must be currently maintained and valid: Certified Information Systems Security Professional (CISSP) Certified Cloud Security Professional (CCSP) Certified Information Security Manager (CISM) Certified in Risk and Information Systems Control (CRISC) GIAC Certified Incident Hacker (GCIH) Advanced Degree in InfoSec Microsoft Certified: Cloud and AI Security Engineer, Associate Cybersecurity Architect Expert, or Azure Solutions Architect Expert. Preferred: Certifications relevant to DevSecOps, cloud security, application security (e.g., GWEB, GCSA, AWS/Azure Security Specialty, OSCP), or emerging AI security. EXPERIENCE: Minimum of eight (8) years of experience in Cloud Security, IT Security, or Security Operations required. Experience using security tools such as Security Incident and Event Management (SIEM), vulnerability scanners, Endpoint Detection and Response (EDR), security auditing tools, and web application firewalls required. Experience with SOC operations, including incident response, alert triage, case management, and use of SOAR or automation platforms to streamline detection and response. Experience integrating security into CI/CD pipelines and DevSecOps practices, including secure code scanning, dependency/vulnerability scanning, and infrastructure-as-code security. Experience with one or more of the following cyber security domain areas: incident response and management, application awareness, identity awareness, identity and access management, data handling and classification, web application firewalls, next-gen firewalls, network zoning and segmentation, cyber resiliency, secure coding, fraud investigation and response, multi-factor authentication, DLP, forensics, BCP/DR, and security within SDLC. TECHNICAL KNOWLEDGE/SKILLS: Solid understanding of generally applicable and accepted auditing standards and frameworks (e.g., NIST, CIS, OWASP)) and best practices for IT services management (e.g., ITIL), government guidelines and laws (e.g., Sarbanes-Oxley) required. Solid understanding of network systems, cloud and application security, with scripting proficiency in Python and PowerShell required. Working knowledge of AI/LLM security risks (e.g., OWASP LLM Top 10) and non-human identity/agent IAM concepts required. Demonstrated fluency using AI assistant tools for security analysis, documentation, or detection engineering preferred. Expertise applying regulatory requirements such as the California Consumer Privacy Act (CCPA), General Data Protection Regulation (GDPR), HIPAA, SOX IT, General Computer Controls (GCC), and FCC required. Additional domain knowledge in the following areas: DevSecOps: CI/CD security integration, container and Kubernetes security, infrastructure-as-code (Terraform, ARM), security scanning, software supply chain security (SBOM, dependency management). Application Security: secure SDLC, threat modeling, SAST/DAST/SCA tooling, API security, secure code review. AI & Agent Security: OWASP LLM Top 10 threat models, non-human identity (NHI) and AI agent IAM policy design. AI behavioral monitoring, securing AI/LLM platform integrations, model and prompt-level risk assessment. AI Fluency: practical, hands-on proficiency using AI assistant tools to support day-to-day security work, including threat report analysis, detection rule generation, and security documentation, with sound judgment on appropriate use, data handling, and human review. SOC Operations & Automation: incident response, detection engineering, SIEM/SOAR administration, playbook and SOP development, alert triage optimization, and metrics and reporting for security operations. MATH AND REASONING ABILITY: Able to solve practical problems and deal with a variety of variables in situations where only limited standardization exists. Able to interpret a variety of instructions furnished in written, oral, diagram, or schedule form. Able to apply concepts such as addition, subtraction, multiplication, division, fractions, percentages, ratios, and proportions to practical situations. CRITICAL THINKING: Ability to think critically and adapt quickly in a flexible and dynamic environment. Proactive and inquisitive approach to work. Ability to derive appropriate conclusions from disparate data points from various sources and apply effectively. LANGUAGE ABILITY: Ability to read, analyze, and interpret general business periodicals, professional journals, technical procedures, or governmental regulations. Ability to write reports, business correspondence, and procedure manuals. Ability to effectively present information and respond to questions from groups of managers, clients, customers, and the general public.
NEEDED COMPETENCIES
- ANALYTICAL THINKING: Collects, analyzes, and synthesizes data and information from diverse sources that is often complex, voluminous and technical. Spots issues and detects gaps in available information. Uses intuition and experience to enhance understanding and interpretation of data. Determines the costs and benefits of alternative courses of action.
- COMMUNICATION AND COLLABORATION: Effective communicator with strong interpersonal and communication skills. Communicates clearly and appropriately using effective verbal, listening, reading and writing skills. Asks questions freely to broaden knowledge and skills. Ability to successfully build relationships and adapt communication style across various environments. Listens and requests clarification. Appropriately responds to and resolves complex situations or problems. Responds well to feedback. Demonstrates effective group presentation and facilitation skills; contributes effectively in meetings with technical and non-technical stakeholders. Meets commitments.
- CREATIVITY AND INNOVATION: Creates new ideas, solutions or approaches to challenges. Seeks inspiration from unconventional sources. Solicits feedback from others on new ideas. Solves complex problems by developing new approaches. Takes calculated risks and understands and works around restraints.
- RESULTS ORIENTATION: Ability to create, implement, evaluate and enhance internal control processes. Balances resources and constraints. Routinely delivers results at a higher level than anticipated (e.g., efficiency, quality). Is frequently assigned to high-profile or challenging projects to achieve results. Attains goals despite resource limitations or adverse, challenging, or changing circumstances.
WHAT WE OFFER
- Work From Home Program (up to 2 days per week upon eligibility)
- Modern Office Setting
- Free On-Site Fitness Facility
- Free On-Site Garage Parking
- Paid Time Off
- Paid Holidays
- Retirements Savings Match
- Group Health Insurance (Medical, Dental, and Vision)
- Hospital Indemnity Insurance
- Life and AD&D Insurance
- Long Term Disability Insurance
- Accident and Critical Illness Insurance
- Flexible Savings Accounts
- Paid Community Volunteer Day
- Employee Assistance Program
- Tuition Reimbursement Program
- Employee Referral Program
- Diversity, Equity and Inclusion Program
ABOUT US
With more than 50 years in business, BHHC has grown from a regional organization to a national insurance group, offering insurance products from coast to coast. Relationships are the cornerstone of our culture, and we believe in doing the right thing. That means we invest in our business in every way possible to deliver on our mission and demonstrate that people are what powers our success. Our commitment to financial strength and integrity means our customers can rest assured that we will be there when it counts.
At BHHC we embrace diversity and foster an environment where our people can be their authentic selves. Our differences make us stronger and better together, which fosters a harmonious workplace—something we truly value. We’ve created an approachable and collaborative atmosphere. Here you’ll find a welcoming workplace where everyone can feel valued, supported, and inspired to do great work. Together, we raise the bar by being curious, remaining customer-focused, and operating with integrity.
