Detection Engineer III

United Wholesale Mortgage (UWM) is seeking an experienced and highly skilled Detection Engineer III to join our Detection Engineering team. This senior role is crucial in leading the development and enhancement of detection mechanisms to identify security threats and anomalies within our systems and networks. The ideal candidate will possess strong technical skills, a proactive and self-starter mindset, and a deep passion for cybersecurity. Additionally, they will act as a subject matter expert and mentor to junior team members while driving continuous improvement of our detection platform and team.

 

Join UWM, where we prioritize innovation and excellence in cybersecurity. As a Senior Detection Engineer, you will play a critical role in enhancing our organization's threat detection capabilities while contributing to a collaborative and proactive team environment. If you are passionate about cybersecurity, eager to make a difference, and ready to lead and mentor a team, we invite you to apply and be part of our mission to deliver secure and reliable solutions for our clients.

 

• →Detection Rule Development: : Lead the creation, testing, and optimization of detection rules, signatures, and use cases for security information and event management (SIEM) systems and other security technologies to enhance threat detection accuracy.
• →Email Gateway Management: Oversee and improve the configuration and management of email security gateways to protect against phishing attacks, spam, and other email-based threats. Implement and monitor policies to strengthen email security and reduce risks.
• →Threat Analysis: Conduct deep analysis of security events and incidents to identify patterns, trends, and anomalies indicating potential security threats. Share insights with the broader team to enhance overall threat detection capabilities.
• →Mentorship and Team Leadership: Provide guidance and mentorship to junior detection engineers, fostering a collaborative and growth-oriented team environment. Act as a subject matter expert and resource for team members.
• →Continuous Improvement: Drive continuous improvement initiatives for detection strategies, processes, and technologies. Identify opportunities for enhancing the detection platform and implement best practices to optimize performance.
• →Collaboration: Partner closely with the incident response, security operations, and IT teams to integrate advanced detection capabilities into broader security practices and incident response processes.
• →Threat Intelligence Utilization: Leverage threat intelligence feeds and sources to enhance detection capabilities, ensuring alignment with emerging threats and attack techniques.
• →Performance Monitoring: Monitor and evaluate detection performance metrics, assess the effectiveness of detection strategies, and recommend improvements as necessary.
• →Documentation: Maintain comprehensive documentation of detection rules, processes, and methodologies to support transparency and knowledge sharing within the team.
• →Continuous Learning: Stay current with the latest security trends, technologies, and best practices in detection engineering. Actively apply this knowledge to improve detection strategies and mentor team members.

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or a related field; relevant certifications (e.g., GCTI, CEH, CISSP) are a plus.
• Extensive experience in detection engineering, threat detection, or a related cybersecurity role, with a strong understanding of SIEM technologies and detection methodologies.
• Demonstrated experience leveraging Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) platforms to identify threats, analyze security events, improve detection capabilities, support incident response activities, and drive automation of security operations.
• Proven experience in developing detection rules and responding to security incidents.
• Strong analytical and problem-solving skills, with a proactive and self-starter mindset.
• Excellent communication and interpersonal skills, with the ability to mentor and lead a team effectively.
• Demonstrated ability to work effectively in a fast-paced environment and manage multiple priorities.
• Commitment to continuous improvement and staying current with the latest security trends and best practices.

All the above duties and responsibilities are essential job functions subject to reasonable accommodation and change. All job requirements listed indicate the minimum level of knowledge, skills and/or ability deemed necessary to perform the job proficiently. Team members may be required to perform other or different job-related duties as requested by their team lead, subject to reasonable accommodation. This document does not create an employment contract, implied or otherwise. Employment with UWM is "at-will." UWM is an Equal Opportunity Employer. By selecting “Apply for this job online” you provide consent to UWM to record phone call conversations between you and UWM to be used for quality control purposes.