Web Security Engineer

Brown Brothers Harriman & Co•Jersey City, NJ

About The Position

The Cybersecurity team, part of the Protect Pillar within BBH's Systems organization, is responsible for safeguarding stakeholder assets and protecting against physical and logical security risks. This role serves as a member of the Web Security team, reporting to the Manager of Web Security Technologies. The primary focus is to protect the firm from web-based threats, including preventing malware, phishing, and data exfiltration, and to partner with incident response teams for detection and remediation of web-originated threats. The role involves designing, architecting, implementing, and supporting enterprise web filtering proxies, secure web gateway, and cloud proxy platforms, ensuring scalability, availability, and alignment with Zero Trust principles. Additionally, the position entails developing and enforcing security policies, including web filtering, SSL inspection, DLP, and threat prevention, and translating regulatory and privacy requirements into technical controls. Automation and integration of security operations through APIs and tooling for policy management, monitoring, and response, as well as integration with SIEM, SOAR, and identity platforms, are key responsibilities. The role also supports business use cases by identifying, prioritizing, and enabling secure web access.

Requirements

Minimum 8 years of experience in information security and web-based security technologies, preferably within financial services
5+ years of web proxy experience
Knowledge of cybersecurity and privacy regulations and associated risks
Excellent analytical and communication skills

Responsibilities

Protecting the firm from web‑based threats
Prevent malware, phishing, and data exfiltration from entering or impacting the environment
Partner with incident response teams to detect and remediate web‑originated threats
Designing and maintaining enterprise web filtering proxies
Architect, implement, and support secure web gateway and cloud proxy platforms
Ensure scalability, availability, and alignment with Zero Trust principles
Developing and enforcing security policies
Create and maintain web filtering, SSL inspection, DLP, and threat‑prevention policies
Translate regulatory and privacy requirements into technical controls
Automating and integrating security operations
Leverage APIs and tooling to automate policy management, monitoring, and response
Integrate with SIEM, SOAR, and identity platforms
Supporting business use cases
Identify, prioritize, and enable secure web access use cases aligned with business needs
Reporting and governance
Reporting regularly on key metrics, risks and program maturity to leadership