Senior Director, Application Security

BHSI; Boston (MA); On-site; USD 150,000 - 185,000; Full time

Job summary

Berkshire Hathaway Specialty Insurance (BHSI) in Boston seeks a visionary leader in Application Security to shape the security strategy for mission-critical applications and APIs, reporting directly to the CISO and guiding a team of elite professionals across the SDLC.

You will embed security into development, drive secure coding practices, and ensure remediation of findings (DAST/SAST/IAST) before release, aligning frameworks with risk posture and regulatory requirements.

Qualifications

• 10+ years of proven success in application security
• Deep experience in Azure and AWS
• Certifications such as CISSP, CISM, CCSK or OSCP are a plus

Responsibilities

• Lead and inspire a team of security analysts and set security excellence standards.
• Serve as the go-to SME for development, product, and business teams—embedding security into every stage of the SDLC.
• Champion secure design and testing practices using OWASP Top 10 and API Top 10 standards.
• Align secure coding principles with development projects, create actionable roadmaps, and report on risk posture.
• Evolve frameworks and policies to meet emerging threats and compliance requirements.
• Review DAST, SAST, and IAST findings and remediate vulnerabilities before release.
• Guide upgrades and mitigations across the enterprise as a DevSecOps thought leader.

Tools

Azure

AWS

Job description

Who are we?

A strategic and trusted insurance partner, Berkshire Hathaway Specialty Insurance (BHSI), provides a broad range of commercial property, casualty and specialty insurance coverages and outstanding service to customers and brokers around the world. Part of Berkshire Hathaway’s insurance operations, we bring our solutions to market with our stellar brand name, top-rated balance sheet, and the expertise of our global team of professionals, who exude excellent capabilities and strong character.

We are a values-based organization where respect, integrity, excellence, collaboration, and passion define who we are and how we do business. We value diversity of backgrounds, experience, and perspectives and strive to foster an inclusive environment that enables all our team members to bring their best selves to work. We are one team committed to building a culture where every teammate has the opportunity to contribute and be recognized. Want to be part of the team building the finest property, casualty and specialty lines insurance company in the world?

Learn more about our unique culture and history.

Job Opportunity

Berkshire Hathaway Specialty Insurance (BHSI) is looking for a visionary leader in Application Security to join our Boston-based team. This is your opportunity to shape the security strategy for mission-critical applications and APIs, working at the intersection of technology and business impact. As a key member of our cybersecurity leadership team, you’ll report directly to the CISO and lead a team of elite professionals, focusing on transforming secure coding practices across our Technology function. If you’re passionate about building secure, scalable solutions and influencing the future of DevSecOps, we’re interested in speaking with you.

Duties & Responsibilities

• Lead & Inspire: Drive a team of talented security analysts, setting the standard for excellence in application security.
• Be the Expert: Serve as the go-to SME for development, product, and business teams—embedding security into every stage of the SDLC.
• Innovate & Protect: Champion secure design and testing practices using OWASP Top 10 and API Top 10 standards.
• Shape Strategy: Align secure coding principles with development projects, create actionable roadmaps, and report on risk posture.
• Stay Ahead: Evolve frameworks and policies to meet emerging threats and compliance requirements.
• Hands-On Impact: Review DAST, SAST, and IAST findings, ensuring vulnerabilities are remediated before release.
• Advise & Influence: Act as a thought leader in DevSecOps, guiding upgrades and mitigating risks across the enterprise.

Qualifications, Skills And Experience

• 10+ years of proven success in application security, with deep experience in Azure and AWS.
• A true security mindset—balancing tactical fixes with strategic vision.
• Exceptional communication skills to translate complex technical issues into clear business insights.
• Expertise in Secure SDLC frameworks and modern security toolsets.
• Certifications like CISSP, CISM, CCSK, OSCP are a plus.

BHSI Offers

• A competitive package and exciting growth opportunities for career-oriented teammates
• A dynamic, action oriented, and thoughtful environment centered on always doing the right thing for our customers, teammates and our other stakeholders
• A purposely non-bureaucratic organization that embraces simplicity over complexity and emphasizes individual excellence in a team framework
• Benefits that support your life and well-being, which include:
  • Comprehensive Health, Dental and Vision benefits
  • Disability Insurance (both short-term and long-term)
  • Life Insurance (for you and your family)
  • Accidental Death & Dismemberment Insurance (for you and your family)
  • Flexible Spending Accounts
  • Health Reimbursement Account
  • Employee Assistance Program
  • Retirement Savings 401(k) Plan with Company Match
  • Generous holiday and Paid Time Off
  • Tuition Reimbursement
  • Paid Parental Leave

The base salary range for this position in Boston is $150,000.00 to $185,000.00, along with annual bonus eligibility. Total compensation for a candidate is determined by their relevant skills, location, and experience. We value our teammates – both their capabilities and character – as demonstrated by our amazing culture.

NOTE: Compensation will be commensurate with experience. This job description is not intended to be all-inclusive. Team Member may perform other related duties as negotiated to meet the ongoing needs of the organization