Senior Director, Cloud Security & AI Security

Berkshire Hathaway Specialty Insurance•Boston, MA

16h•Onsite

About The Position

Berkshire Hathaway Specialty Insurance (BHSI) is seeking a forward-thinking Cloud Security leader with a strong grounding in AI Security to join our Boston-based team. This role offers a unique opportunity to define and advance our cloud security strategy across modern, mission-critical platforms, operating at the intersection of technology, risk, and business impact. As a core member of our cybersecurity leadership team reporting directly to the CISO, you will drive the evolution of our cloud and AI security ecosystems—establishing governance, controls, and compliance across our cloud infrastructure while helping secure our growing Artificial Intelligence footprint. If you are passionate about shaping the future of cloud security and influencing how secure systems and services are built and governed, we’d welcome the conversation.

Requirements

5–10+ years of experience in cybersecurity, with a focus on cloud security.
Hands-on experience with AWS, Azure, or GCP security services.
Strong knowledge of Cloud IAM and identity governance.
Strong knowledge of Network security (VPCs/VNets, firewalls, segmentation).
Strong knowledge of Cloud-native monitoring, threat detection, and logging.
Strong knowledge of Infrastructure-as-Code (Terraform, CloudFormation, Bicep).
Experience with CSPM, CWPP/CNAPP, SIEM, SOAR, and vulnerability management tools.
Knowledge of compliance frameworks and cloud shared responsibility models.

Responsibilities

Develop and maintain the organization’s cloud security and AI security strategy, standards, and policies across IaaS, PaaS, and SaaS environments.
Define and enforce cloud architecture security principles aligned with Zero Trust.
Identify and enforce AI security controls and configurations aligned with our cloud architecture.
Lead cloud and AI risk assessments, gap analysis, and initiative planning.
Guide migration and modernization efforts to ensure secure-by-design implementations.
Oversee the configuration, monitoring, and continuous improvement of CSPM (Cloud Security Posture Management), CWPP/CNAPP (Cloud Workload Protection / Cloud-Native Security), SIEM/SOAR integrations for cloud telemetry, and Identity Threat Detection (ITDR).
Direct incident response for cloud-related security events in collaboration with SOC/IR teams.
Ensure continuous monitoring for misconfigurations, vulnerabilities, and anomalies.
Support cloud & AI IAM frameworks (least privilege, conditional access, workload identities).
Drive cloud-related adoption of encryption, secrets management, and key management (BYOK/CMK).
Ensure efficacy of data classification and DLP controls across cloud environments.
Embed security controls and testing into CI/CD pipelines in collaboration with AppSec.
Oversee IaC scanning and container security while supporting SAST/DAST and supply chain security.
Collaborate with engineering to remediate findings and architect secure workloads.
Ensure cloud environments meet regulatory and compliance requirements.
Own cloud security and AI security audits and evidence collection.
Mature asset inventories, risk registers, and control documentation.
Build and mentor a team of cloud security & AI security engineers/analysts.
Provide regular reporting to security leadership and executives.
Partner across technology, infrastructure, DevOps, and architecture.