Senior Cyber Security Engineer
Berkshire Hathaway Homestate Companies2 days ago
Sacramento, CA, USASenior
Base Salary
$155k - $189k/yr
Responsibilities
- Develop repeatable security architectures and enterprise security standards with internal and external partners.
- Design, implement, and maintain DevSecOps pipelines with SAST, DAST, SCA, container and image scanning, and policy-as-code controls.
- Advance application security through secure code review, threat modeling, vulnerability remediation, and secure SDLC practices.
- Integrate security into IaaS, PaaS, and SaaS cloud environments and protect applications and infrastructure from emerging threats.
- Develop AI and agent security capabilities covering OWASP LLM Top 10 risks, non-human identities, AI agent IAM, behavioral monitoring, and AI-specific incident response.
- Support SOC functions including monitoring, detection engineering, alert triage, case management, threat hunting, and incident response.
- Design and implement SOAR automation and orchestration to improve alert triage, investigation, and response workflows.
- Perform EDR-based incident response, vulnerability validation, host and network forensics, log analysis, packet capture review, and IOC identification.
- Document, communicate, and present security risks and technical controls to technical and non-technical stakeholders.
- Participate in cyber exercises, monitor regulatory and threat developments, and mentor junior security team members.
Requirements
- Bachelor’s degree in information/cyber security, information risk, information systems, computer science, information management, or a related discipline is strongly preferred.
- At least eight years of experience in cloud security, IT security, or security operations is required.
- At least one current and valid certification such as CISSP, CCSP, CISM, CRISC, GCIH, an advanced InfoSec degree, or specified Microsoft cloud/security certifications is required.
- Experience with SIEM, vulnerability scanners, EDR, security auditing tools, and web application firewalls is required.
- Experience with SOC operations, incident response, alert triage, case management, SOAR, and security automation is required.
- Experience integrating security into CI/CD pipelines and DevSecOps practices, including secure code, dependency, vulnerability, and infrastructure-as-code scanning, is required.
- Knowledge of cloud, application, network, identity and access management, forensics, secure coding, data protection, cyber resilience, and security within the SDLC is required.
- Working knowledge of AI/LLM security risks, OWASP LLM Top 10, non-human identity and agent IAM concepts, and AI assistant tools is required or preferred as specified.
- Proficiency in Python and PowerShell is required.
- Knowledge of NIST, CIS, OWASP, ITIL, Sarbanes-Oxley, CCPA, GDPR, HIPAA, SOX IT, GCC, and FCC requirements is required.
- Preferred qualifications include DevSecOps, cloud security, application security, emerging AI security, GWEB, GCSA, AWS/Azure Security Specialty, or OSCP certifications.
- Strong analytical, critical-thinking, communication, collaboration, presentation, problem-solving, and results-orientation skills are required.
Benefits
- Work From Home Program allowing up to two days per week remotely.
- Modernized historical setting in East Sacramento with lot parking provided.
- Paid time off, paid holidays, and a paid community volunteer day.
- Immediately vested retirement savings with company match.
- Medical, dental, vision, life, AD&D, long-term disability, hospital indemnity, accident, and critical illness insurance.
- Flexible spending accounts, employee assistance program, tuition reimbursement, employee referral program, and diversity, equity, and inclusion program.
About Berkshire Hathaway Homestate Companies
Berkshire Hathaway Homestate Companies is a U.S. commercial property‑casualty insurer providing workers’ compensation, commercial auto, commercial property, and public‑entity coverages to businesses nationwide, primarily through independent agents. It operates as part of Berkshire Hathaway’s insurance group and is headquartered in San Francisco. The company has a national footprint built from eight regional carriers and emphasizes local underwriting presence to serve small to large employers.