Senior Director, Application Security & DevSecOps (Cloud)

BHSI; Boston (MA); Presencial; USD 150.000 - 185.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health benefits

Dental & vision benefits

401(k) with company match

Paid time off

Descripción de la vacante

Berkshire Hathaway Specialty Insurance (BHSI) in Boston seeks a visionary leader in Application Security to shape the security strategy for mission-critical applications and APIs. You will report to the CISO and lead a team of experts, driving secure coding practices across the Technology function and influencing DevSecOps across the organization.

You will be at the intersection of technology and business impact, transforming secure design, testing, and risk reporting while aligning security

Formación

• 10+ years of proven success in application security.
• Deep experience in Azure and AWS.
• Excellent communication to translate tech into business insights.
• Secure SDLC expertise and modern security toolsets.
• Certifications like CISSP, CISM, CCSK, or OSCP are a plus.

Responsabilidades

• Lead a security team of application security analysts.
• Embed security into every SDLC stage with product teams.
• Champion secure design and testing using OWASP Top 10.
• Align secure coding with development roadmaps and risk reports.
• Evolve security frameworks to meet emerging threats.
• Review DAST, SAST, and IAST findings and remediate.
• Advise on DevSecOps upgrades across the enterprise.

Conocimientos

Application security

Azure & AWS

Security strategy

Communication

Secure SDLC

Certifications

Descripción del empleo

Berkshire Hathaway Specialty Insurance (BHSI) in Boston seeks a visionary leader in Application Security to shape the security strategy for mission-critical applications and APIs. You will report to the CISO and lead a team of experts, driving secure coding practices across the Technology function and influencing DevSecOps across the organization.

You will be at the intersection of technology and business impact, transforming secure design, testing, and risk reporting while aligning security