Incident Responder- Digital Forensics

United Wholesale Mortgage (UWM) is seeking a highly skilled Incident Responder to join our Information Security team. This role is pivotal in identifying, analyzing, and responding to cybersecurity incidents within our organization. The ideal candidate will possess strong technical skills, a proactive and self-starter mindset, and a deep passion for cybersecurity. Additionally, they will work collaboratively with other team members to ensure the protection of UWM's data and systems while driving continuous improvement in our incident response processes.

 

• →Incident Detection and Analysis:
• →Lead the monitoring of security alerts and events from various sources including SIEM systems, IDS/IPS, firewalls, and endpoint security solutions.
• →Perform initial triage, validation, and classification of incidents to determine the severity and potential impact.
• →Conduct in-depth analysis of security incidents to identify the root cause and understand the attack vectors.
• →Incident Response and Remediation:
• →Respond promptly to cybersecurity incidents following established incident response procedures.
• →Contain and eradicate threats by isolating affected systems, removing malicious artifacts, and applying necessary patches or configurations.
• →Coordinate with IT and other relevant teams to ensure effective incident resolution and system recovery.
• →Forensic Investigation:
• →Lead and conduct digital forensic investigations to collect and preserve evidence related to security incidents.
• →Analyze compromised systems, network traffic, and log files to reconstruct attack timelines and identify indicators of compromise (IOCs).
• →Prepare detailed incident reports and documentation for internal use and regulatory compliance.
• →Continuous Improvement:
• →Participate in post-incident reviews to identify lessons learned and recommend improvements to incident response processes and security controls.
• →Stay current with the latest cybersecurity threats, vulnerabilities, and attack techniques to enhance response capabilities.
• →Contribute to the development and maintenance of incident response playbooks, runbooks, and standard operating procedures.
• →Collaboration and Communication:
• →Work closely with other security team members, IT staff, and business units to ensure a coordinated and effective response to incidents.
• →Provide timely and clear communication to stakeholders regarding the status and impact of incidents.
• →Assist in conducting security awareness training and exercises to improve the organization's overall security posture.

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or related field
• 3-5 years of experience in incident response, digital forensics, and cybersecurity operations
• Strong understanding of network protocols, operating systems, and security technologies.
• Prior experience mentoring others 
• Proven experience with security information and event management (SIEM) tools, intrusion detection/prevention systems (IDS/IPS), and endpoint security solutions.
• Strong analytical and problem-solving skills, with a proactive and self-starter mindset.
• Excellent communication and interpersonal skills, with the ability to work effectively in a fast-paced environment and manage multiple priorities.
• Commitment to continuous improvement and staying current with the latest security trends and best practices.
• Ability to work 100% on-site in Pontiac, MI

• Relevant certifications (e.g., CISSP, CISM, CEH, GCIH)

All the above duties and responsibilities are essential job functions subject to reasonable accommodation and change. All job requirements listed indicate the minimum level of knowledge, skills and/or ability deemed necessary to perform the job proficiently. Team members may be required to perform other or different job-related duties as requested by their team lead, subject to reasonable accommodation. This document does not create an employment contract, implied or otherwise. Employment with UWM is "at-will." UWM is an Equal Opportunity Employer. By selecting “Apply for this job online” you provide consent to UWM to record phone call conversations between you and UWM to be used for quality control purposes.