Senior Cyber Security Engineer

Berkshire Hathaway Homestate Companies - Workers Compensation Division

. Develop repeatable security architectures with internal and external partners.

Posted 11/9/2026full-timeSacramento • California • United StatesSenior💰 $155,390 - $189,140 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and implementing security architectures, integrating security into CI/CD pipelines, and applying regulatory requirements such as CCPA and GDPR. Proficient in threat modeling, vulnerability remediation, and utilizing AI security practices within cloud environments.

Highest-signal resume keywords

Cloud SecurityDevSecOps PracticesIncident ResponseVulnerability ScanningAI Security Risks

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Python ScriptingPowerShell ScriptingThreat ModelingVulnerability RemediationSecurity AutomationSecurity AuditingForensicsCI/CD IntegrationSOAR AutomationSecurity Documentation

Soft Skills

Critical ThinkingAdaptabilityCollaborationCommunicationCreativity

Tools & Technologies

SIEMEDR ToolsVulnerability ScannersWeb Application FirewallsSOC OperationsAutomation PlatformsAI Assistant ToolsSecurity Monitoring ToolsIncident Management SystemsThreat Analysis Tools

Certifications & Qualifications

Information Security CertificationCloud Security CertificationDevSecOps CertificationApplication Security CertificationAI Security Certification

Industry Keywords

NISTCISOWASPITILSarbanes-OxleyGDPRHIPAACCPADLPBCP/DR

Tech Stack

Tools & technologies

CloudCyber SecurityFirewallsPythonSDLC

About the role

Key responsibilities & impact

Develop repeatable security architectures with internal and external partners.
Contribute to Agile methodology architecture and repeatable security practices.
Design, implement, and maintain DevSecOps pipelines with automated security testing and policy-as-code gates in CI/CD workflows.
Partner with development teams on secure code review, threat modeling, and vulnerability remediation.
Evaluate risks and protect applications and infrastructure against emerging threats.
Document and diagram administrative and technical controls.
Integrate security into IaaS, PaaS, and SaaS cloud service models.
Develop and apply AI/agent security practices, including OWASP LLM Top 10 threat models and non-human identity/AI agent IAM policies.
Monitor AI agent behavior and respond to AI-specific security incidents.
Use and evaluate AI assistant tools for threat analysis, detection rule generation, and security documentation with human review and data controls.
Serve as a subject matter expert and contribute to security standards and procedures.
Document and present risks affecting confidentiality, integrity, and availability.
Support and improve SOC monitoring, detection engineering, and case management.
Design and implement SOAR automation for alert triage, investigation, and incident response.
Conduct incident response using EDR tools and processes.
Perform threat hunting and share current threat information.
Validate vulnerabilities using scanners, CVE data, and CVSS scoring.
Perform host and network forensics, including log analysis, PCAP review, and IOC identification.
Participate in annual cyber exercises covering identification, response, and recovery.
Monitor security issues, vulnerabilities, regulatory and legal changes, standards, AI governance, and compliance.
Share expertise and mentor junior team members.
Work with business partners, internal technology teams, and external vendors to research, deploy, and configure security technologies and processes.

Requirements

What you’ll need

Bachelor’s degree in Information/Cyber Security, Information Risk, Information Risk Management, Information Systems, Computer Science, Information Management, or related discipline strongly preferred.
A minimum of one currently maintained and valid certification in one of the listed security, cloud, architecture, or advanced information security credentials.
Preferred certifications relevant to DevSecOps, cloud security, application security, or emerging AI security.
Minimum of eight (8) years of experience in Cloud Security, IT Security, or Security Operations required.
Experience with SIEM, vulnerability scanners, EDR, security auditing tools, and web application firewalls required.
Experience with SOC operations, incident response, alert triage, case management, and SOAR or automation platforms.
Experience integrating security into CI/CD pipelines and DevSecOps practices.
Experience in one or more specified cybersecurity domain areas, including IAM, secure coding, forensics, DLP, BCP/DR, and security within SDLC.
Understanding of auditing standards and frameworks including NIST, CIS, OWASP, ITIL, Sarbanes-Oxley, and applicable government guidelines and laws.
Understanding of network systems, cloud security, and application security, with Python and PowerShell scripting proficiency required.
Working knowledge of AI/LLM security risks, OWASP LLM Top 10, and non-human identity/agent IAM concepts required.
Expertise applying CCPA, GDPR, HIPAA, SOX IT, GCC, and FCC regulatory requirements required.
Knowledge of DevSecOps, application security, AI and agent security, AI-assisted security workflows, SOC operations, and security automation.
Ability to solve practical problems, interpret instructions, and apply mathematical concepts to practical situations.
Critical-thinking ability and adaptability in a flexible, dynamic environment.
Ability to read and interpret technical, regulatory, and business materials; write reports and procedures; present information effectively.
Strong analytical, communication, collaboration, creativity, innovation, and results-orientation competencies.

Benefits

Comp & perks

Work From Home Program (up to 2 days per week)
Modernized Historical Setting in East Sacramento
Lot Parking Provided
Paid Time Off
Paid Holidays
Immediate Vesting of Retirement Savings + Company Match
Group Health Insurance (Medical, Dental, and Vision)
Life and AD&D Insurance
Long Term Disability Insurance
Hospital Indemnity Insurance
Accident and Critical Illness Insurance
Flexible Savings Accounts
Paid Community Volunteer Day
Employee Assistance Program
Tuition Reimbursement Program
Employee Referral Program
Diversity, Equity and Inclusion Program