> Markdown version of [/jobs/ext/2283128-web-security-engineer](https://www.wearedevelopers.com/jobs/ext/2283128-web-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Web Security Engineer

- **Company:** Brown Brothers Harriman & Co.
- **Location:** Jersey City, NJ, United States
- **Experience:** Expert
- **Salary:** $100,000.0 - $130,000.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Proxy Servers, Cyber Security, Data Governance, Identity and Access Management, Information Security Management, Logical Security, Phishing, Zero Trust Network Access, Web Application Security, Security Information and Event Management, Enterprise Data Management, Transport Layer Security, Security Orchestration, Automation & Response
- **Published:** August 28, 2026
- **Apply:** https://bbh.wd5.myworkdayjobs.com/BBH/job/Jersey-City/Web-Security-Engineer_72437

## About the Role

* Minimum 8 years of experience in information security and web-based security technologies, preferably within financial services
 * 5+ years of web proxy experience
 * Knowledge of cybersecurity and privacy regulations and associated risks
 * Excellent analytical and communication skills

## Description

Background: The Cybersecurity team is a team within the Protect Pillar in Systems. The Protect Pillar is a unique BBH-construct designed for clear, centralized and coordinated accountability: to protect against physical and logical security risks; to safeguard stakeholder assets; and to detect, prepare for, and respond effectively to security events. To that end, the Protect Pillar encompasses the following areas:

 * Cybersecurity;
 * Enterprise Data Protection and Data Governance;
 * Enterprise Incident Management;
 * Global Security; and
 * Information Security Management ("ISM").

Given that technology is an integral component of the Pillar's control measures and a key asset to safeguard, the Protect Pillar sits within BBH's Systems organization.

Main areas of responsibilities:

Reporting to the Manager of Web Security Technologies, this role serves as member on the Web Security team and is responsible for:

 * Protecting the firm from web-based threats
 * Prevent malware, phishing, and data exfiltration from entering or impacting the environment
 * Partner with incident response teams to detect and remediate web-originated threats
 * Designing and maintaining enterprise web filtering proxies
 * Architect, implement, and support secure web gateway and cloud proxy platforms
 * Ensure scalability, availability, and alignment with Zero Trust principles
 * Developing and enforcing security policies
 * Create and maintain web filtering, SSL inspection, DLP, and threat-prevention policies
 * Translate regulatory and privacy requirements into technical controls
 * Automating and integrating security operations
 * Leverage APIs and tooling to automate policy management, monitoring, and response
 * Integrate with SIEM, SOAR, and identity platforms
 * Supporting business use cases
 * Identify, prioritize, and enable secure web access use cases aligned with business needs
 * Reporting and governance
 * Reporting regularly on key metrics, risks and program maturity to leadership


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls)
- [Exploring the Power of gRPC-Gateway for Writing RESTful Services](https://www.wearedevelopers.com/videos/2072-exploring-the-power-of-grpc-gateway-for-writing-restful-services)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [MFA? Game over! Watch your protection collapse – live](https://www.wearedevelopers.com/videos/100322-mfa-game-over-watch-your-protection-collapse-live)
- [Enterprise-Cloud-Native - Fast-Paced Development & Deployment in a Highly Secure Banking Environment](https://www.wearedevelopers.com/videos/671-enterprise-cloud-native-fast-paced-development-deployment-in-a-highly-secure-banking-environment)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Security Basics for Vibe Coders](https://www.wearedevelopers.com/magazine/598-security-basics-for-vibe-coders)