Senior Cybersecurity Engineer

Overview

As a Senior Information Security Engineer at Houlihan Lokey, you defend a global, distributed financial services environment against evolving threats. You’ll work with a cross-regional security team to design controls, respond to incidents, and mature security programs across endpoints, networks, cloud, and applications. Your role blends hands-on engineering with security governance to protect client data and regulatory compliance. This is a growth-focused opportunity at a leading advisory firm, connecting technology, security, and finance to safeguard sensitive deal information.

Responsibilities

• Design and maintain security controls across endpoints, servers, networks, cloud platforms (Azure/GCP), and identity systems (Active Directory, Entra ID, SSO/MFA)
• Lead security incident response: triage, containment, eradication, post-incident reviews, and improve global incident response playbooks
• Monitor and tune detection across SIEM, EDR, network security monitoring, email security, and cloud posture management
• Collaborate with IT, development, and business teams to embed security in new projects, deployments, and M&A-related tech integrations
• Manage vulnerability scanning, prioritization, remediation tracking, and reporting for a global environment
• Lead and improve identity and access management practices, including PAM and least-privilege enforcement
• Design data protection controls (DLP, encryption, secure collaboration tools) for MNPI and deal data
• Support internal/external penetration testing and red/purple team activities with remediation validation
• Contribute to third-party/vendor risk assessments for sensitive workflows
• Support regulatory and compliance efforts across global financial services regulations (e.g., FCA, FINRA, SEC, GDPR)
• Develop and maintain security documentation, runbooks, and mentor junior engineers; contribute to security awareness
• Participate in on-call rotation across multiple regions to support follow-the-sun operations

Key requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience
• 7+ years of information security engineering, security operations, or related role in financial services or regulated industry
• Hands-on incident response experience leading investigations and remediation
• Broad experience across at least two domains (endpoint security/EDR, network security, IAM/PAM, cloud security, email security, application security)
• Strong understanding of threats facing financial institutions and data exfiltration risks
• Practical experience with SIEM, log analysis, and security monitoring
• Knowledge of vulnerability management tools (Tenable, Qualys, Rapid7)
• Strong scripting/automation skills (Python, PowerShell, Bash)
• Excellent communication skills and ability to collaborate across time zones
• Proven ability to manage multiple projects in a fast-paced environment

• Clear and professional communication
• High emotional intelligence under pressure
• Curiosity and growth mindset
• Endpoint security and EDR
• Network security (firewalls, segmentation, IDS/IPS, VPN)
• Identity and access management; privileged access management

…