Business Unit:
Information Technology Industry:
No Industry
Overview
Houlihan Lokey, Inc. (NYSE:HLI) is a leading global investment bank recognized for delivering independent strategic and financial advice to corporations, financial sponsors, and governments. With uniquely deep industry expertise, broad international reach, and a partnership approach rooted in trust, the firm provides innovative, integrated solutions across mergers and acquisitions, capital solutions, financial restructuring, and financial and valuation advisory. Our unmatched transaction volumes provide differentiated, data-driven perspectives that help our clients achieve their most critical goals. To learn more about Houlihan Lokey, please visit HL.com.
About the Team
We believe that as we grow individually, we also grow as an Information Technology team allowing us to contribute to the overall growth of Houlihan Lokey. We embrace challenges and try new things, always looking for ways to improve. We deliver technology products and services enabled everywhere, so business can happen anywhere. We like where we work, who we work with, and what we do. We cultivate a culture where we all thrive.
Description:
Information security sits at the center of how Houlihan Lokey protects client trust and operates as a global financial institution. As a Senior Information Security Engineer, you help ensure that the technology powering the firm's business is defended against evolving threats — work that matters more with every new regulation, adversary, and client expectation the industry takes on.
You will join the global security team in defending a complex, distributed enterprise environment that spans multiple regions, business lines, and regulatory jurisdictions. We are looking for a versatile security generalist with hands-on experience securing endpoints, networks, identity systems, cloud infrastructure, and applications — someone equally comfortable architecting a control as they are leading the response to a live incident. Strong incident response experience is a significant asset for this role; penetration testing exposure is a plus. It's an ideal opportunity for an experienced engineer who wants to help shape the security posture of a global financial institution and build a career at the intersection of technology, security, and financial services, inside a team that will invest in your growth from day one.
Key Responsibilities:
Design, implement, and maintain security controls across endpoints, servers, network infrastructure, cloud platforms (e.g., Azure/GCP), and identity systems (e.g., Active Directory, Entra ID, SSO/MFA).
Act as a senior responder for security incidents: lead triage, investigation, containment, eradication, and post-incident review, and help mature the firm's incident response playbooks, tooling, and processes globally.
Monitor, tune, and improve detection capabilities across SIEM, EDR, network security monitoring, email security, and cloud security posture management tools.
Partner with IT infrastructure, application development, and business teams to embed security into new projects, deployments, and M&A-related technology integrations (e.g., deal room environments, data rooms, client-facing platforms).
Conduct vulnerability management activities, including scanning, prioritization, remediation tracking, and reporting across a global, multi-office environment.
Lead and continuously improve identity and access management practices, including privileged access management (PAM), least-privilege enforcement, and access reviews.
Design and enforce data protection controls to safeguard confidential client information, deal data, and material non-public information (MNPI), including DLP, encryption, and secure collaboration tooling.
Support and help scope internal and external penetration testing and red team engagements, including remediation validation and retesting.
Contribute to third-party/vendor risk assessments, particularly for vendors…