Berkshire Hathaway Homestate Companies, Workers Compensation Division, is looking for a
Senior Cyber Security Engineer
to join its IT Security team! This technical professional will assist in developing, implementing, communicating, and executing the Enterprise Security services and cyber security program, with emphasis on securing the software development lifecycle, cloud and AI enabled systems, and security operations. This individual will work closely with key business partners, internal technology teams, and external vendors to research, deploy, and configure technologies and processes that strengthen the defenses of the enterprise.
ESSENTIAL RESPONSIBILITIES AND PRINCIPAL ACCOUNTABILITIES
QUALIFICATIONS
- EDUCATION: Bachelor’s degree in Information/Cyber Security, Information Risk, Information Risk Management, Information Systems, Computer Science, Information Management, or related discipline strongly preferred.
- LICENSES AND CERTIFICATIONS: A minimum of one certification in the following, which must be currently maintained and valid:
Certified Information Systems Security Professional (CISSP)
Certified Cloud Security Professional (CCSP)
Certified Information Security Manager (CISM)
Certified in Risk and Information Systems Control (CRISC)
GIAC Certified Incident Hacker (GCIH)
Advanced Degree in InfoSec
Microsoft Certified: Cloud and AI Security Engineer, Associate Cybersecurity Architect Expert, or Azure Solutions Architect Expert.
Preferred: Certifications relevant to DevSecOps, cloud security, application security (e.g., GWEB, GCSA, AWS/Azure Security Specialty, OSCP), or emerging AI security.
EXPERIENCE:
Minimum of eight (8) years of experience in Cloud Security, IT Security, or Security Operations required.
Experience using security tools such as Security Incident and Event Management (SIEM), vulnerability scanners, Endpoint Detection and Response (EDR), security auditing tools, and web application firewalls required.
Experience with SOC operations, including incident response, alert triage, case management, and use of SOAR or automation platforms to streamline detection and response.
Experience integrating security into CI/CD pipelines and DevSecOps practices, including secure code scanning, dependency/vulnerability scanning, and infrastructure-as-code security.
Experience with one or more of the following cyber security domain areas: incident response and management, application awareness, identity awareness, identity and access management, data handling and classification, web application firewalls, next-gen firewalls, network zoning and segmentation, cyber resiliency, secure coding, fraud investigation and response, multi-factor authentication, DLP, forensics, BCP/DR, and security within SDLC.
TECHNICAL KNOWLEDGE/SKILLS:
Solid understanding of generally applicable and accepted auditing standards and frameworks (e.g., NIST, CIS, OWASP)) and best practices for IT services management (e.g., ITIL), government guidelines and laws (e.g., Sarbanes-Oxley) required.
Solid understanding of network systems, cloud and application security, with scripting proficiency in Python and PowerShell required.
Working knowledge of AI/LLM security risks (e.g., OWASP LLM Top 10) and non-human identity/agent IAM concepts required. Demonstrated fluency using AI assistant tools for security analysis, documentation, or detection engineering preferred.
Expertise applying regulatory requirements such as the California Consumer Privacy Act (CCPA), General Data Protection Regulation (GDPR), HIPAA, SOX IT, General Computer Controls (GCC), and FCC required.
Additional domain knowledge in the following areas:
DevSecOps: CI/CD security integration, container and Kubernetes security, infrastructure-as-code (Terraform, ARM), security scanning, software supply chain security (SBOM, dependency management).
Application Security: secure SDLC, threat modeling, SAST/DAST/SCA tooling, API security, secure code review.
AI & Agent Security: OWASP LLM Top 10 threat models, non-human identity (NHI) and AI agent IAM policy design. AI behavioral monitoring, securing AI/LLM platform integrations, model and prompt-level risk assessment.
AI Fluency: practical, hands-on proficiency using AI assistant tools to support day-to-day security work, including threat report analysis, detection rule generation, and security documentation, with sound judgment on appropriate use, data handling, and human review.
SOC Operations & Automation: incident response, detection engineering, SIEM/SOAR administration, playbook and SOP development, alert triage optimization, and metrics and reporting for security operations.
MATH AND REASONING ABILITY: Able to solve practical problems and deal with a variety of variables in situations where only limited standardization exists. Able to interpret a variety of instructions furnished in written, oral, diagram, or schedule form. Able to apply concepts such as addition, subtraction, multiplication, division, fractions, percentages, ratios, and proportions to practical situations.
CRITICAL THINKING: Ability to think critically and adapt quickly in a flexible and dynamic environment. Proactive and inquisitive approach to work. Ability to derive appropriate conclusions from disparate data points from various sources and apply effectively.
LANGUAGE ABILITY: Ability to read, analyze, and interpret general business periodicals, professional journals, technical procedures, or governmental regulations. Ability to write reports, business correspondence, and procedure manuals. Ability to effectively present information and respond to questions from groups of managers, clients, customers, and the general public.
