Senior Cybersecurity Analyst

Who are we?

A strategic and trusted insurance partner, Berkshire Hathaway Specialty Insurance (BHSI), provides a broad range of commercial property, casualty and specialty insurance coverages and outstanding service to customers and brokers around the world. Part of Berkshire Hathaway’s insurance operations, we bring our solutions to market with our stellar brand name, top-rated balance sheet, and the expertise of our global team of professionals, who exude excellent capabilities and strong character.

We are a values-based organization where respect, integrity, excellence, collaboration, and passion define who we are and how we do business. We value diversity of backgrounds, experience, and perspectives and strive to foster an inclusive environment that enables all our team members to bring their best selves to work. We are one team committed to building a culture where every teammate has the opportunity to contribute and be recognized.

Want to be part of the team building the finest property, casualty and specialty lines insurance company in the world?

Learn more about our unique culture and history.

Berkshire Hathaway Specialty Insurance (BHSI) has an exciting opportunity for a strong, technical leader with a passion for deep cyber analytics, forensics, and investigation. As a critical member of our Boston based cybersecurity team, you will report directly to the Director of IT Security and provide direction and thought leadership, collaborating with peer cyber analysts and engineers to piece together digital evidence, workflows, adversary tactics and trajectories to protect and prevent current and future threat paths within a complex, but controlled landscape.

This dynamic role will lead threat hunting, digital forensics, and advanced analysis of security and related infrastructure incidents while evaluating key indicators of risk to determine threat validity and remediation. As a senior member of our cybersecurity team, you will help uplift security awareness and education across all business units at BHSI, through risk-led leadership and industry specific threat intelligence.

• Provide In-depth technical analysis of critical security events/incidents to assess immediate and long-term risks.
• Lead threat hunting and digital forensics activities, identifying threats and overall risk exposure.
• Provide advanced cyber-analytics techniques, mitigating risks associated with enterprise systems and solutions.
• Conduct continuous monitoring of network assets and transactions, identifying abnormalities and threats.
• Champion cyber-forensic analysis of complex systems and data transactions.
• Enhance and mature SOAR tools to improve and augment incident response and threat detection capabilities.
• Spearhead our threat intelligence program to identify and aggregate security threats and risks.
• Align vulnerability assessments with mitigation activities that reduce overall risk exposure.
• Provide proactive evaluation of systems, network, and data to validate security protocols and measures.
• Actively collaborate with our Infrastructure team to enhance maturity of cybersecurity solutions.
• Aid in identifying and elevating risks that will drive remediation activities and help establish security best practices.
• Act as a security advisor and thought leader, enhancing security solutions and elevating security awareness.

• 5+ years of cybersecurity experience, including (but not limited to) incident response, alert triage, forensics, vulnerability management, application security, cloud security, or other security subdisciplines.
• Hands-on experience with threat intelligence and security tools.
• Proficient in analyzing network, server, device, and application traffic and metadata.
• Strong background in vulnerability management and remediation.
• Experience with Identity and Access Management (IAM), as well as PIM and PAM solutions.
• Experience with threat-lead penetration Testing, attack simulation, and red/blue team exercises.
• Demonstrated skill in managing the security incident lifecycle: detection, analysis, and response.
• Proficiency in IT Risk Management and Assessment.
• Solid…