2027 Technology Summer Internship – Cybersecurity & Technology Risk

Brown Brothers Harriman & Co•Boston, MA

3d•Onsite

About The Position

An internship with BBH Technology provides insight into how technology supports fast-paced financial markets and the Firm's critical business needs. Our teams analyze, design, implement, operate, support, and protect high-quality technology solutions that help colleagues respond quickly and effectively to client needs. Join the Protect pillar and help BBH deliver technology securely by protecting the digital assets of the Firm and our clients. What You’ll Experience in BBH’s Internship Program: Overview: Experience a dynamic 10-week internship where you will be fully immersed in BBH’s culture and business needs Hands-On Learning: Dive into meaningful projects in areas like investment management, operations, technology and client services Mentorship That Matters: Work side-by-side with industry leaders who are invested in your growth Professional Development: Sharpen your skills through workshops, speaker series, and networking events designed to accelerate your career. Receive continuous and personalized feedback throughout the program – empowering you to grow, refine your skills, and help you navigate your path to success Collaborative Environment: Join a tight-knit team where your ideas are heard, your contributions matter and your potential is unleashed On-Site Presence: Immerse yourself in our company culture and accelerate your professional development with your daily in-office presence Community: Make a positive impact by volunteering in our philanthropic program, BBHcares, while connecting with fellow BBHers What you may expect from a Cybersecurity Technology Internship with BBH Use scanning, monitoring, detection, and analytics tools to identify vulnerabilities, suspicious activity, configuration risks, and emerging cyber threats Support security investigations, alert triage, incident documentation, escalation, containment, recovery, and prevention activities Analyze threat actors, campaigns, malware, phishing, identity attacks, vulnerabilities, indicators of compromise, and adversary techniques Contribute to threat intelligence assessments, briefings, threat hunting preparation, and risk-based prioritization Support web and network defense through proxy and Secure Web Gateway controls, URL filtering, traffic analysis, content inspection, and data exfiltration prevention Assist with application and configuration security, including secure coding, code vulnerability analysis, control testing, hardening, and remediation tracking Collaborate with Security Operations, Cyber Incident Management, Vulnerability Management, Red Team, infrastructure, application, risk, and vendor teams Help document controls and procedures and support audit, regulatory, metrics, and evidence needs Recommend practices that strengthen defenses, reduce risk, and improve cybersecurity program maturity Potential focus areas Security Operations and Incident Management: security monitoring, investigations, response coordination, detection, and escalation Cyber Threat Intelligence: threat research, attacker behavior, campaigns, vulnerabilities, and financial-services risk Web and Network Security: web traffic, proxies, malicious domains, phishing, malware, and data leakage controls Application and Configuration Security: secure coding, scanning, hardening, vulnerability remediation, and control assurance Cyber Risk, Governance and Awareness: policies, metrics, audits, risk communication, exercises, and awareness content

Requirements

Current junior in college, entering senior year in fall of 2027 with a background in and passion for Computer Science, Information Technology, Cybersecurity, or a related field
Strong academic achievement, with a GPA of 3.3 or higher preferred
Strong analytical, research, and problem-solving skills
Outstanding written and verbal communication skills, including the ability to explain technical issues clearly
Leadership, curiosity, initiative, sound judgment, collaboration, and the ability to manage multiple priorities
Intermediate proficiency in Excel and PowerPoint

Nice To Haves

Cybersecurity concepts including phishing, malware, vulnerabilities, identity, network, and endpoint security
SIEM, EDR, IDS/IPS, firewalls, proxies, email security, scanners, threat intelligence, or DLP
MITRE ATT&CK, Cyber Kill Chain, intelligence cycle, OWASP Top 10, DevSecOps, or risk methodologies
Splunk SPL, Microsoft KQL, SQL, Python, PowerShell, Bash, Power BI, Jira, or workflow tools
Microsoft Defender, Sentinel, Entra, Purview, Security Copilot, or other cloud security technologies
Cyber coursework, labs, clubs, capture-the-flag activities, projects, internships, or entry-level certifications

Responsibilities

Use scanning, monitoring, detection, and analytics tools to identify vulnerabilities, suspicious activity, configuration risks, and emerging cyber threats
Support security investigations, alert triage, incident documentation, escalation, containment, recovery, and prevention activities
Analyze threat actors, campaigns, malware, phishing, identity attacks, vulnerabilities, indicators of compromise, and adversary techniques
Contribute to threat intelligence assessments, briefings, threat hunting preparation, and risk-based prioritization
Support web and network defense through proxy and Secure Web Gateway controls, URL filtering, traffic analysis, content inspection, and data exfiltration prevention
Assist with application and configuration security, including secure coding, code vulnerability analysis, control testing, hardening, and remediation tracking
Collaborate with Security Operations, Cyber Incident Management, Vulnerability Management, Red Team, infrastructure, application, risk, and vendor teams
Help document controls and procedures and support audit, regulatory, metrics, and evidence needs
Recommend practices that strengthen defenses, reduce risk, and improve cybersecurity program maturity