Web Security Engineer

The Web Security Engineer role sits within Brown Brothers Harriman’s Cybersecurity team under the Protect Pillar in Systems. The position focuses on defending the firm from web-based threats and on operating and supporting secure web gateway and proxy platforms.

Role Overview

As part of the Protect Pillar, this engineer helps ensure secure, scalable web access aligned with Zero Trust principles. Responsibilities include the design, enforcement, and automation of web filtering, SSL inspection, DLP, and threat-prevention policies. The role also supports integration with incident response and identity capabilities to improve detection, response, and governance.

Key Responsibilities

• Protect the firm from web-based threats, including preventing malware, phishing, and data exfiltration from entering or impacting the environment
• Partner with incident response teams to detect and remediate web-originated threats
• Design and maintain enterprise web filtering proxy capabilities
• Architect, implement, and support secure web gateway and cloud proxy platforms
• Ensure scalability, availability, and alignment with Zero Trust principles
• Develop and enforce security policies
• Create and maintain web filtering, SSL inspection, DLP, and threat-prevention policies
• Translate regulatory and privacy requirements into technical controls
• Automate and integrate security operations using available APIs and tooling
• Leverage APIs and tooling to automate policy management, monitoring, and response
• Integrate with SIEM, SOAR, and identity platforms
• Support business use cases by identifying, prioritizing, and enabling secure web access options aligned with business needs
• Report regularly on key metrics, risks, and program maturity to leadership

Required Qualifications

• Minimum 8 years of experience in information security and web-based security technologies, preferably within financial services
• 5+ years of web proxy experience
• Knowledge of cybersecurity and privacy regulations and associated risks
• Excellent analytical and communication skills

Relevant Technologies

• Zero Trust
• Web filtering proxies
• Secure web gateway
• Cloud proxy platforms
• SSL inspection
• DLP
• Threat-prevention policies
• APIs
• SIEM and SOAR
• Identity platforms

Compensation and Location

Location: Jersey City, NJ (onsite)

Salary: USD 85,000 - 130,000 per year

Salary Range Details:

• NJ: $100,000-$130,000 base salary + annual target bonus
• MA: $85,000 - $130,000 base salary + annual target bonus

Benefits

• Annual target bonus
• Base salary + annual target bonus
• Discretionary bonuses
• Profit-sharing
• Benefits that enhance your experience at BBH from long-term savings, healthcare, and income protection
• Professional development opportunities
• Time off

Team and Organization Context

The Cybersecurity team is part of the Protect Pillar in Systems. The Protect Pillar is designed for clear, centralized, and coordinated accountability to protect against physical and logical security risks; safeguard stakeholder assets; and detect, prepare for, and respond effectively to security events. It encompasses Cybersecurity, Enterprise Data Protection and Data Governance, Enterprise Incident Management, Global Security, and Information Security Management (ISM). Since technology is integral to the Pillar’s control measures and a key asset to safeguard, the Protect Pillar sits within BBH’s Systems organization.

Equal Opportunity and Application Encouragement

We value diverse experiences. If your career path did not follow a traditional route, includes alternative experiences, or does not meet every qualification or skill listed, you are encouraged to apply.