AppSec & DevSecOps Leader — Secure SDLC Strategy

BHSI; Boston (MA); On-site; USD 150,000 - 185,000; Full time

Job summary

Berkshire Hathaway Specialty Insurance (BHSI) in Boston seeks a visionary leader in Application Security to shape the security strategy for mission-critical applications and APIs, reporting directly to the CISO and guiding a team of elite professionals across the SDLC.

You will embed security into development, drive secure coding practices, and ensure remediation of findings (DAST/SAST/IAST) before release, aligning frameworks with risk posture and regulatory requirements.

Qualifications

• 10+ years of proven success in application security
• Deep experience in Azure and AWS
• Certifications such as CISSP, CISM, CCSK or OSCP are a plus

Responsibilities

• Lead and inspire a team of security analysts and set security excellence standards.
• Serve as the go-to SME for development, product, and business teams—embedding security into every stage of the SDLC.
• Champion secure design and testing practices using OWASP Top 10 and API Top 10 standards.
• Align secure coding principles with development projects, create actionable roadmaps, and report on risk posture.
• Evolve frameworks and policies to meet emerging threats and compliance requirements.
• Review DAST, SAST, and IAST findings and remediate vulnerabilities before release.
• Guide upgrades and mitigations across the enterprise as a DevSecOps thought leader.

Tools

Azure

AWS

Job description

Berkshire Hathaway Specialty Insurance (BHSI) in Boston seeks a visionary leader in Application Security to shape the security strategy for mission-critical applications and APIs, reporting directly to the CISO and guiding a team of elite professionals across the SDLC.

You will embed security into development, drive secure coding practices, and ensure remediation of findings (DAST/SAST/IAST) before release, aligning frameworks with risk posture and regulatory requirements.