Web Security Engineer
At BBH, Partnership is more than a form of ownership—it’s our approach to business and relationships. We know that supporting your professional and personal goals is the best way to help our clients and advance our business. We take that responsibility seriously. With a 200-year legacy and a shared passion for what’s next, this is the right place to build a fulfilling career.Background: The Cybersecurity team is a team within the Protect Pillar in Systems. The Protect Pillar is a unique BBH-construct designed for clear, centralized and coordinated accountability: to protect against physical and logical security risks; to safeguard stakeholder assets; and to detect, prepare for, and respond effectively to security events. To that end, the Protect Pillar encompasses the following areas:Cybersecurity;Enterprise Data Protection and Data Governance;Enterprise Incident Management;Global Security; andInformation Security Management (“ISM”).Given that technology is an integral component of the Pillar’s control measures and a key asset to safeguard, the Protect Pillar sits within BBH’s Systems organization.Main areas of responsibilities:Reporting to the Manager of Web Security Technologies, this role serves as member on the Web Security team and is responsible for:Protecting the firm from web‑based threatsPrevent malware, phishing, and data exfiltration from entering or impacting the environmentPartner with incident response teams to detect and remediate web‑originated threatsDesigning and maintaining enterprise web filtering proxiesArchitect, implement, and support secure web gateway and cloud proxy platformsEnsure scalability, availability, and alignment with Zero Trust principlesDeveloping and enforcing security policiesCreate and maintain web filtering, SSL inspection, DLP, and threat‑prevention policiesTranslate regulatory and privacy requirements into technical controlsAutomating and integrating security operationsLeverage APIs and tooling to automate policy management, monitoring, and responseIntegrate with SIEM, SOAR, and identity platformsSupporting business use casesIdentify, prioritize, and enable secure web access use cases aligned with business needsReporting and governanceReporting regularly on key metrics, risks and program maturity to leadership Requirements:Minimum 8 years of experience in information security and web-based security technologies, preferably within financial services5+ years of web proxy experienceKnowledge of cybersecurity and privacy regulations and associated risksExcellent analytical and communication skills Salary RangeNJ: $100,000-$130,000 base salary + annual target bonusMA: $85,000 - $130,000 base salary + annual target bonusBBH and its affiliates' compensation program includes base salary, discretionary bonuses, and profit-sharing. The anticipated base salary range(s) shown above are only for the indicated location(s) and may differ in other locations due to cost of living and labor consi...