Who are we?
A strategic and trusted insurance partner, Berkshire Hathaway Specialty Insurance (BHSI), provides a broad range of commercial property, casualty and specialty insurance coverages and outstanding service to customers and brokers around the world. Part of Berkshire Hathaway’s insurance operations, we bring our solutions to market with our stellar brand name, top-rated balance sheet, and the expertise of our global team of professionals, who exude excellent capabilities and strong character.
We are a values-based organization where respect, integrity, excellence, collaboration, and passion define who we are and how we do business. We value diversity of backgrounds, experience, and perspectives and strive to foster an inclusive environment that enables all our team members to bring their best selves to work. We are one team committed to building a culture where every teammate has the opportunity to contribute and be recognized. Want to be part of the team building the finest property, casualty, and specialty lines insurance company in the world?
Learn more about our unique culture and history .
Job Opportunity
Berkshire Hathaway Specialty Insurance (BHSI) has an exciting opportunity for a mid-level Cyber Security Engineer with at least 3-5 years’ experience with industry leading cloud platform and services to join, in office, their Boston, MA team. As a Cyber Security Engineer, you will have the ability to own and drive success for the team by taking an active role in the execution of our IT security solutions and integrations, while collaborating closely with both internal and external partners. In this newly created role, there is an opportunity for significant growth potential, and the ability to shape the evolution of the security roadmap while making impactful short-term contributions to an organization that places the utmost importance on “doing the right thing.”
Duties & Responsibilities
- Investigate security alerts and threat hunting leads across a variety of tools such as EDR, e-mail security, SIEM, etc.
- Develop, document, and refine standard operating procedures for investigation and response.
- Maintain situational awareness of changes to threat landscape, industry trends, and internal operating environment.
- Works closely with our external MSSP and SOC analysts to enhance security solutions to reduce malicious activity based on security data analysis, review of the current threat landscape, and assessment/triage of security tickets.
- Focus on tuning and configuration of security solutions to ensure new features are implemented, alerts are of high fidelity, and beneficial integrations are maintained with other security solutions.
- Participate in escalation and response to significant security events.
- Assists in the evaluation, development, implementation, and operationalization of enterprise security solutions, taking lead in ensuring security policies are supported.
- Work with our global infrastructure team to analyze security threats and recommend technical infrastructure architecture changes to reduce risk.
- Work with development teams in cloud platforms, services, and other SaaS solutions to ensure deployments follow security policies and security coding practices, as well as mitigating risk to enterprise and customer data.
- Be an escalation point for junior engineers and analysts as well as being an SME with our suite of security tools.
Qualifications, Skills, And Experience
- Have a ‘security mindset’ in examining and understanding the impact of business and infrastructure changes to the overall security posture both tactically and strategically.
- Firsthand SOC experience investigating and responding to security events across two or more of the following: cloud platforms, IAG, EDR, email security, MAM, MDM, SIEM, and threat intelligence.
- Strong foundational knowledge of core enterprise information technologies and security principals.
- Experience developing and documenting processes for others to follow.
- Ability to complete open-ended tasks with limited direction/supervision.
- Demonstrable effective communication, as well as strong interpersonal and analytical skills.
- Additional experience in network management, data loss prevention, and application security management.
- Able to prioritize operational and project tasks with the ability to pivot when the risk and impact has been escalated.
- Information technology and/or information security specific certifications would be a nice to have.
BHSI Offers
- A competitive package and exciting growth opportunities for career-oriented teammates.
- A dynamic, actioned oriented, and thoughtful environment centered on always doing the right thing for our customers, teammates, and our other stakeholders.
- A purposely non-bureaucratic organization that embraces simplicity over complexity and emphasizes individual excellence in a team framework.
NOTE: Compensation will be commensurate with experience. This job description is not intended to be all-inclusive. Team Member may perform other related duties as negotiated to meet the ongoing needs of the organization.
