Job Description:

Job Summary

We are seeking a visionary leader in Application Security to drive the security strategy for mission-critical applications and APIs. This role sits at the intersection of technology and business impact, leading secure coding practices and advancing DevSecOps maturity across the organization. You will guide a high-performing security team while embedding security into every phase of the software development lifecycle.

Duties & Responsibilities

Lead & Inspire

  • Manage and mentor a team of application security professionals, fostering excellence and continuous improvement

Security Leadership

  • Serve as the subject matter expert for development, product, and business teams

  • Integrate security best practices throughout the SDLC

Secure Design & Testing

  • Champion OWASP Top 10 and API Top 10 standards

  • Promote secure architecture and proactive vulnerability prevention

Strategic Planning

  • Align secure coding initiatives with development roadmaps

  • Develop metrics and reporting on application risk posture

Threat Readiness

  • Evolve security frameworks and policies to address emerging threats and compliance needs

Hands-On Oversight

  • Review SAST, DAST, and IAST findings

  • Ensure vulnerabilities are remediated prior to production release

DevSecOps Advocacy

  • Guide tool enhancements and process improvements

  • Influence enterprise-wide security modernization efforts

Qualifications, Skills & Experience

  • 10+ years of experience in Application Security

  • Strong expertise in cloud environments (Azure and AWS)

  • Deep knowledge of Secure SDLC frameworks and modern security tools

  • Proven ability to balance strategic vision with tactical execution

  • Excellent communication skills bridging technical and business teams

  • Relevant certifications such as CISSP, CISM, CCSK, or OSCP preferred

Working Place:

Boston, Massachusetts, United States

Company :

2026 Feb 26th Virtual - Berkshire Hathaway Specialty Insurance