Senior Cyber Security Engineer

Berkshire Hathaway Homestate Companies, Workers Compensation Division, is seeking a Senior Cyber Security Engineer to join its IT Security team. This hybrid role is based in the East Sacramento office, with Work From Home up to 2 days per week.

Essential responsibilities include designing, implementing, and maintaining DevSecOps pipelines with automated security testing — SAST, DAST, SCA, and container/image scanning — and policy-as-code gates in CI/CD workflows; advancing application security through the secure SDLC, threat modeling, and secure code review in partnership with development teams; and securing cloud and AI/agent environments, including applying expertise in the OWASP LLM Top 10, non-human identity (NHI) and AI-agent identity and access management, and AI behavioral monitoring.

The role also supports Security Operations Center (SOC) functions, including detection engineering, SIEM/SOAR automation, alert triage, incident response, threat hunting, and host/network forensics, as well as vulnerability validation using security scanners, CVE data, and CVSS scoring.

Qualifications

• Bachelor’s degree in Information/Cyber Security, Information Systems, Computer Science, or a related field strongly preferred.
• A minimum of one current certification: CISSP, CCSP, CISM, CRISC, GCIH, or an advanced degree in information security.
• Minimum of eight (8) years of experience in cloud security, IT security, or security operations.

Location: Hybrid — East Sacramento office, with Work From Home up to 2 days per week.