Senior Director, Application Security

About Us

Berkshire Hathaway Specialty Insurance (BHSI) is a strategic and trusted insurance partner, providing a broad range of commercial property, casualty, and specialty insurance coverages and outstanding service to customers and brokers worldwide. As part of Berkshire Hathaway’s insurance operations, we leverage our stellar brand name, top-rated balance sheet, and the expertise of our global team of professionals. We are a values-based organization where respect, integrity, excellence, collaboration, and passion define who we are and how we do business. BHSI values diversity of backgrounds, experience, and perspectives and fosters an inclusive environment that enables all team members to contribute and be recognized.

About the Role

BHSI is seeking a visionary leader in Application Security to join our Boston-based team. This role offers the opportunity to shape the security strategy for mission-critical applications and APIs, working at the intersection of technology and business impact. As a key member of our cybersecurity leadership team, you will report directly to the CISO and lead a team of elite professionals, focusing on transforming secure coding practices across our Technology function.

Responsibilities

• Lead and inspire a team of talented security analysts, setting the standard for excellence in application security.
• Serve as the go-to subject matter expert for development, product, and business teams, embedding security into every stage of the SDLC.
• Champion secure design and testing practices using OWASP Top 10 and API Top 10 standards.
• Align secure coding principles with development projects, create actionable roadmaps, and report on risk posture.
• Evolve frameworks and policies to meet emerging threats and compliance requirements.
• Review DAST, SAST, and IAST findings, ensuring vulnerabilities are remediated before release.
• Act as a thought leader in DevSecOps, guiding upgrades and mitigating risks across the enterprise.

Requirements

• 10+ years of proven success in application security, with deep experience in Azure and AWS.
• A strong security mindset, balancing tactical fixes with strategic vision.
• Exceptional communication skills to translate complex technical issues into clear business insights.
• Expertise in Secure SDLC frameworks and modern security toolsets.
• Certifications such as CISSP, CISM, CCSK, or OSCP are a plus.

Benefits

• Comprehensive health, dental, and vision benefits.
• Disability insurance (both short-term and long-term).
• Life insurance and accidental death & dismemberment insurance for you and your family.
• Flexible spending accounts and health reimbursement account.
• Employee assistance program.
• Retirement savings 401(k) plan with company match.
• Generous holiday and paid time off.
• Tuition reimbursement.
• Paid parental leave.

Pay

The base salary range for this position in Boston is $150,000 to $185,000, along with annual bonus eligibility. Total compensation is determined by relevant skills, location, and experience.