Senior Director, Application Security

Job Summary

We are seeking a visionary leader in Application Security to drive the security strategy for mission-critical applications and APIs. This role sits at the intersection of technology and business impact, leading secure coding practices and advancing DevSecOps maturity across the organization. You will guide a high-performing security team while embedding security into every phase of the software development lifecycle.

Duties & Responsibilities

Lead & Inspire

• Manage and mentor a team of application security professionals, fostering excellence and continuous improvement

Security Leadership

• Serve as the subject matter expert for development, product, and business teams

• Integrate security best practices throughout the SDLC

Secure Design & Testing

• Champion OWASP Top 10 and API Top 10 standards

• Promote secure architecture and proactive vulnerability prevention

Strategic Planning

• Align secure coding initiatives with development roadmaps

• Develop metrics and reporting on application risk posture

Threat Readiness

• Evolve security frameworks and policies to address emerging threats and compliance needs

Hands-On Oversight

• Review SAST, DAST, and IAST findings

• Ensure vulnerabilities are remediated prior to production release

DevSecOps Advocacy

• Guide tool enhancements and process improvements

• Influence enterprise-wide security modernization efforts

Qualifications, Skills & Experience

• 10+ years of experience in Application Security

• Strong expertise in cloud environments (Azure and AWS)

• Deep knowledge of Secure SDLC frameworks and modern security tools

• Proven ability to balance strategic vision with tactical execution

• Excellent communication skills bridging technical and business teams

• Relevant certifications such as CISSP, CISM, CCSK, or OSCP preferred

Boston, Massachusetts, United States

2026 Feb 26th Virtual - Berkshire Hathaway Specialty Insurance