Senior Threat and Vulnerability Engineer

United Wholesale Mortgage (UWM) is seeking a skilled Threat and Vulnerability Engineer to help protect our digital assets, data, and infrastructure from evolving cyber threats. This role identifies, assesses, prioritizes, and supports remediation of vulnerabilities across networks, applications, cloud environments, and endpoints. The ideal candidate brings strong security expertise, a proactive mindset, and a commitment to continuously improving UWM’s security posture.

 

At UWM, we prioritize innovation and security in all our operations. As the Threat and Vulnerability Engineer, you will play a critical role in strengthening our security stance and safeguarding our systems and data. If you are a passionate security practitioner with a strong background in threat and vulnerability management, we invite you to apply and contribute to our mission of delivering secure and trustworthy solutions in the mortgage industry.

 

• →Vulnerability Management:
• →Conduct regular and ad-hoc vulnerability scans across UWM's IT environment (servers, workstations, network devices, cloud platforms, web applications).
• →Analyze scan results, identify false positives, and prioritize vulnerabilities based on risk, severity, and potential business impact.
• →Assist with optimization of vulnerability management tools and platforms, ensuring accurate and comprehensive coverage.
• →Threat Intelligence & Research:
• →Stay current with the latest cybersecurity threats, vulnerabilities, attack techniques, and industry best practices.
• →Research and evaluate new tools, technologies, and methodologies to enhance UWM's security stance.
• →Contribute to threat modeling exercises for new and existing systems.
• →Remediation & Collaboration:
• →Work closely with IT operations, development teams, and other stakeholders to communicate vulnerability findings and guide remediation efforts.
• →Track remediation progress, validate fixes, and report on the overall vulnerability management lifecycle.
• →Develop and implement security controls and processes to mitigate identified risks.
• →Reporting & Documentation:
• →Generate clear and concise reports on vulnerability status, remediation efforts, and security posture for various audiences.
• →Maintain accurate documentation of security processes, procedures, and configurations.
• →Incident Response Support:
• →Assist the Security Operations Center (SOC) and Incident Response teams during security incidents, providing expertise on vulnerability context and potential attack vectors.

• Bachelor’s degree in computer science, Information Security, or a related technical field, or equivalent practical experience.
• 5+ years of experience in information security, with a strong focus on vulnerability management, penetration testing, or security engineering.
• Solid understanding of networking protocols (TCP/IP, DNS, HTTP), operating systems (Windows, Linux), and common enterprise applications.
• Proficiency with industry-standard vulnerability scanning tools.
• Experience with web application security testing tools and understanding of the OWASP Top 10.
• Familiarity with cloud security principles and practices (AWS, Azure, or GCP).
• Knowledge of common security frameworks and compliance requirements (e.g., NIST, ISO 27001, GLBA).
• Scripting skills (e.g., Python, PowerShell, Bash) for automation and analysis.
• Strong analytical, problem-solving, and critical thinking skills.
• Excellent written and verbal communication skills, with the ability to convey complex technical information to both technical and non-technical audiences.
• Ability to work independently and collaboratively in a fast-paced, dynamic environment.

• Relevant security certifications (e.g., CISSP, OSCP, CEH, CompTIA Security+, GIAC certifications such as GSEC, GWAPT, GPEN).
• Familiarity with DevSecOps principles and integrating security into the CI/CD pipeline.
• Experience in the financial services or mortgage industry.

All the above duties and responsibilities are essential job functions subject to reasonable accommodation and change. All job requirements listed indicate the minimum level of knowledge, skills and/or ability deemed necessary to perform the job proficiently. Team members may be required to perform other or different job-related duties as requested by their team lead, subject to reasonable accommodation. This document does not create an employment contract, implied or otherwise. Employment with UWM is "at-will." UWM is an Equal Opportunity Employer. By selecting “Apply for this job online” you provide consent to UWM to record phone call conversations between you and UWM to be used for quality control purposes.