Vulnerability & Security Engineering Lead

Brown Brothers Harriman; Jersey City (NJ); On-site; USD 150,000 - 195,000; Full time

Benefits offered by this job

Bonus program

Profit-sharing

Comprehensive benefits

Professional development

Job summary

Brown Brothers Harriman (BBH) is seeking a Senior Vulnerability & Security Engineer to advance our vulnerability management and security configuration programs. You will collaborate with infrastructure, cloud, and development teams to convert technical findings into clear business risk insights and actionable remediation strategies.

This role drives baselines, monitoring, automated assessments, and governance integration, with mentoring responsibilities across the cybersecurity team.

Qualifications

• 7+ years of cybersecurity experience in highly regulated industries.
• Strong technical knowledge of enterprise infrastructure, OS, networking, databases, applications, and cloud platforms.
• Demonstrated experience analyzing vulnerabilities, assessing risk, and developing remediation strategies.
• Experience engineering and operating enterprise vulnerability management and security configuration programs.
• Experience with vulnerability exception processes, compensating controls, risk acceptance methodologies, and remediation governance.
• Strong understanding of cybersecurity frameworks, regulations, and industry practices, including NIST, ISO 27001, OWASP, NYDFS Part 500, DORA, CIS and STIG.
• Experience interpreting cybersecurity control requirements and evaluating compliance with organizational standards.
• Strong analytical, problem-solving, stakeholder management, communication, and influencing skills.
• Ability to communicate complex technical issues effectively to both technical and business audiences.

Responsibilities

• Lead vulnerability assessment and risk analysis across the enterprise.
• Evaluate CVEs, vendor advisories, and threat intelligence for affected technologies, exploitability, attack vectors, business impact, and mitigations.
• Provide risk-based recommendations to support remediation planning and governance processes.
• Partner with infrastructure, cloud, application, platform, and engineering teams on remediation strategies.
• Assess effectiveness of proposed mitigations and residual risk.
• Develop and maintain secure configuration baselines aligned with standards and frameworks.
• Engineer automated solutions to assess and report configuration compliance.
• Integrate configuration findings with vulnerability management workflows to improve risk visibility.
• Evaluate emerging technologies to enhance vulnerability and configuration management.
• Serve as escalation point and SME for vulnerability and configuration issues.
• Provide technical leadership and mentorship to cybersecurity team members.
• Maintain awareness of emerging threats and best practices.

Skills

Vulnerability management

Security configuration

Risk analysis

Stakeholder communication

Technical leadership

Threat intelligence

Tools

EDR platforms

PowerShell

Python

Job description

Brown Brothers Harriman (BBH) is seeking a Senior Vulnerability & Security Engineer to advance our vulnerability management and security configuration programs. You will collaborate with infrastructure, cloud, and development teams to convert technical findings into clear business risk insights and actionable remediation strategies.

This role drives baselines, monitoring, automated assessments, and governance integration, with mentoring responsibilities across the cybersecurity team.