Web Security Engineer
Job Description
This Web Security Engineer role sits in Brown Brothers Harriman’s Cybersecurity team within the Protect Pillar in Systems, focused on defending against web-based threats and operating secure web gateway and proxy platforms.
Responsibilities
- Protect the firm from web-based threats, including malware, phishing, and attempts at data exfiltration
- Prevent web-originated threats from entering or impacting the environment
- Partner with incident response teams to detect and remediate web-originated threats
- Design, implement, and maintain enterprise web filtering proxies
- Architect, build, and provide ongoing support for secure web gateway and cloud proxy platforms
- Ensure scalability and availability of web security services
- Align web security capabilities with Zero Trust principles
- Develop and enforce security policies, including:
- Web filtering
- SSL inspection
- DLP (data loss prevention)
- Threat-prevention policies
- Translate regulatory and privacy requirements into technical controls
- Automate and integrate security operations to support monitoring and response
- Use APIs and tooling to automate policy management, monitoring, and response
- Integrate web security workflows with SIEM, SOAR, and identity platforms
- Support business use cases by identifying, prioritizing, and enabling secure web access aligned with business needs
- Provide reporting and governance, including regular communication of key metrics, risks, and program maturity to leadership
Requirements
- Minimum 8 years of experience in information security and web-based security technologies, preferably in financial services
- 5+ years of web proxy experience
- Knowledge of cybersecurity and privacy regulations and the risks associated with them
- Excellent analytical and communication skills
Technologies
- Zero Trust
- Web filtering proxies
- Secure web gateway
- Cloud proxy platforms
- SSL inspection
- DLP
- Threat-prevention policies
- APIs
- SIEM
- SOAR
Benefits
- Annual target bonus
- Base salary + annual target bonus
- Discretionary bonuses
- Profit-sharing
- Benefits that support long-term savings, healthcare, and income protection
- Professional development opportunities
- Time off
Compensation
- NJ: $100,000 - $130,000 base salary + annual target bonus
- MA: $85,000 - $130,000 base salary + annual target bonus
Team and Pillar Context
- The Cybersecurity team is part of the Protect Pillar in Systems
- The Protect Pillar is a BBH construct designed for clear, centralized, and coordinated accountability:
- Protect against physical and logical security risks
- Safeguard stakeholder assets
- Detect, prepare for, and respond effectively to security events
- The Protect Pillar encompasses:
- Cybersecurity
- Enterprise Data Protection and Data Governance
- Enterprise Incident Management
- Global Security
- Information Security Management (ISM)
- Because technology is integral to Pillar control measures and an asset to safeguard, the Protect Pillar sits within BBH’s Systems organization
Equal Opportunity and Application Guidance
- We value diverse experiences and transferrable skillsets
- If your career path is non-traditional, includes alternative experiences, or you do not meet every qualification listed, apply anyway