Web Security Engineer

This Web Security Engineer role sits in Brown Brothers Harriman’s Cybersecurity team within the Protect Pillar in Systems, focused on defending against web-based threats and operating secure web gateway and proxy platforms.

Responsibilities

• Protect the firm from web-based threats, including malware, phishing, and attempts at data exfiltration
• Prevent web-originated threats from entering or impacting the environment
• Partner with incident response teams to detect and remediate web-originated threats
• Design, implement, and maintain enterprise web filtering proxies
• Architect, build, and provide ongoing support for secure web gateway and cloud proxy platforms
• Ensure scalability and availability of web security services
• Align web security capabilities with Zero Trust principles
• Develop and enforce security policies, including:
  • Web filtering
  • SSL inspection
  • DLP (data loss prevention)
  • Threat-prevention policies
• Translate regulatory and privacy requirements into technical controls
• Automate and integrate security operations to support monitoring and response
• Use APIs and tooling to automate policy management, monitoring, and response
• Integrate web security workflows with SIEM, SOAR, and identity platforms
• Support business use cases by identifying, prioritizing, and enabling secure web access aligned with business needs
• Provide reporting and governance, including regular communication of key metrics, risks, and program maturity to leadership

Requirements

• Minimum 8 years of experience in information security and web-based security technologies, preferably in financial services
• 5+ years of web proxy experience
• Knowledge of cybersecurity and privacy regulations and the risks associated with them
• Excellent analytical and communication skills

Technologies

• Zero Trust
• Web filtering proxies
• Secure web gateway
• Cloud proxy platforms
• SSL inspection
• DLP
• Threat-prevention policies
• APIs
• SIEM
• SOAR

Benefits

• Annual target bonus
• Base salary + annual target bonus
• Discretionary bonuses
• Profit-sharing
• Benefits that support long-term savings, healthcare, and income protection
• Professional development opportunities
• Time off

Compensation

• NJ: $100,000 - $130,000 base salary + annual target bonus
• MA: $85,000 - $130,000 base salary + annual target bonus

Team and Pillar Context

• The Cybersecurity team is part of the Protect Pillar in Systems
• The Protect Pillar is a BBH construct designed for clear, centralized, and coordinated accountability:
  • Protect against physical and logical security risks
  • Safeguard stakeholder assets
  • Detect, prepare for, and respond effectively to security events
• The Protect Pillar encompasses:
  • Cybersecurity
  • Enterprise Data Protection and Data Governance
  • Enterprise Incident Management
  • Global Security
  • Information Security Management (ISM)
• Because technology is integral to Pillar control measures and an asset to safeguard, the Protect Pillar sits within BBH’s Systems organization

Equal Opportunity and Application Guidance

• We value diverse experiences and transferrable skillsets
• If your career path is non-traditional, includes alternative experiences, or you do not meet every qualification listed, apply anyway