Incident Responder- Digital Forensics

United Wholesale Mortgage•Pontiac, MI

2d•Onsite

About The Position

United Wholesale Mortgage is seeking an Incident Responder to join its Information Security team. This role identifies, analyzes, and responds to cybersecurity incidents, protects company data and systems, and contributes to continuous improvement in incident response processes. The position requires working 100% on-site in Pontiac, Michigan. Applicants must be authorized to work in the United States without employer sponsorship; employer-sponsored work authorization is not available now or in the future. The Incident Responder monitors and analyzes security alerts, responds to and remediates threats, and leads digital forensic investigations. The role also supports post-incident reviews, maintains incident response documentation and procedures, communicates with stakeholders, and collaborates with security, IT, and business teams.

Requirements

Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or a related field.
3–5 years of experience in incident response, digital forensics, and cybersecurity operations.
Strong understanding of network protocols, operating systems, and security technologies.
Prior experience mentoring others.
Experience with SIEM tools, IDS/IPS, and endpoint security solutions.
Strong analytical and problem-solving skills and a proactive, self-starter mindset.
Excellent communication and interpersonal skills, with the ability to work effectively in a fast-paced environment and manage multiple priorities.
Commitment to continuous improvement and staying current with security trends and best practices.
Ability to work 100% on-site in Pontiac, Michigan.
Authorization to work in the United States without employer sponsorship.

Nice To Haves

Relevant certifications such as CISSP, CISM, CEH, or GCIH.

Responsibilities

Lead monitoring of security alerts and events from SIEM systems, IDS/IPS, firewalls, and endpoint security solutions.
Triage, validate, and classify incidents to determine severity and potential impact.
Analyze incidents to identify root causes and understand attack vectors.
Respond to cybersecurity incidents according to established procedures.
Contain and eradicate threats by isolating affected systems, removing malicious artifacts, and applying patches or configurations.
Coordinate with IT and other relevant teams to resolve incidents and recover systems.
Lead digital forensic investigations and collect and preserve evidence.
Analyze compromised systems, network traffic, and log files to reconstruct attack timelines and identify indicators of compromise.
Prepare incident reports and documentation for internal use and regulatory compliance.
Participate in post-incident reviews and recommend improvements to incident response processes and security controls.
Stay current with cybersecurity threats, vulnerabilities, and attack techniques.
Contribute to incident response playbooks, runbooks, and standard operating procedures.
Collaborate with security team members, IT staff, and business units to coordinate incident response.
Communicate incident status and impact clearly and promptly to stakeholders.
Assist with security awareness training and exercises.

Benefits

Paid time off after 30 days.
Additional parental and maternity leave benefits after 12 months.
Adoption reimbursement program.
Paid volunteer hours.
Paid training and career development.
Medical, dental, vision, and life insurance.
401(k) with employer match.
Mortgage discount and area business discounts.
Free membership to a fitness center, including exercise classes and sports leagues.
Wellness area with an in-house primary-care physician’s office, full-time massage therapist, and hair salon.
Gourmet cafeteria with homemade breakfast and lunch.
Convenience store with healthy grab-and-go snacks.
In-house Starbucks and Dunkin.
Indoor/outdoor café with Wi-Fi.