Senior Threat & Vulnerability Security Engineer

United Shore Financial Services LLC; Pontiac (MI); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

PTO after 30 days

401k with employer match

Medical, dental, vision insurance

Job summary

United Wholesale Mortgage (UWM) seeks a Threat and Vulnerability Engineer to protect digital assets across networks, apps, cloud, and endpoints. You will conduct scans, analyze results, and guide remediation while collaborating with IT and Dev teams.

Strong scripting and security expertise are essential for continuous improvement of UWM’s security posture. The role emphasizes threat intelligence, incident response support, and developing security controls.

Qualifications

• Bachelor’s degree in computer science, Information Security, or related field, or equivalent practical experience.
• 5+ years of experience in information security, with a strong focus on vulnerability management, penetration testing, or security engineering.
• Solid understanding of networking protocols (TCP/IP, DNS, HTTP), operating systems (Windows, Linux), and common enterprise applications.
• Proficiency with industry-standard vulnerability scanning tools.
• Experience with web application security testing tools and understanding of the OWASP Top 10.
• Familiarity with cloud security principles and practices (AWS, Azure, or GCP).
• Knowledge of common security frameworks and compliance requirements (e.g., NIST, ISO 27001, GLBA).
• Scripting skills (e.g., Python, PowerShell, Bash) for automation and analysis.
• Strong analytical, problem-solving, and critical thinking skills.
• Excellent written and verbal communication skills, with the ability to convey complex technical information to both technical and non-technical audiences.
• Ability to work independently and collaboratively in a fast-paced, dynamic environment.

Responsibilities

• Conduct regular and ad-hoc vulnerability scans across IT environment.
• Analyze scan results, identify false positives, and prioritize vulnerabilities based on risk, severity, and potential business impact.
• Assist with optimization of vulnerability management tools and platforms, ensuring accurate and comprehensive coverage.
• Stay current with the latest cybersecurity threats, vulnerabilities, attack techniques, and best practices.
• Research and evaluate new tools, technologies, and methodologies to enhance security stance.
• Contribute to threat modeling exercises for new and existing systems.
• Work closely with IT operations, development teams, and other stakeholders to communicate vulnerability findings and guide remediation efforts.
• Track remediation progress, validate fixes, and report on the vulnerability management lifecycle.
• Develop and implement security controls and processes to mitigate identified risks.
• Generate clear and concise reports on vulnerability status, remediation efforts, and security posture for various audiences.
• Maintain accurate documentation of security processes, procedures, and configurations.
• Assist the SOC during security incidents, providing vulnerability context and potential attack vectors.

Skills

Vulnerability management

Penetration testing

Networking protocols

Cloud security

Scripting

Analytical skills

Communication skills

Independent & collaborative work

Threat intelligence

Education

Bachelor’s degree in CS/Info Security

Tools

Vulnerability scanning tools

Web app security testing tools

OWASP Top 10

Job description

United Wholesale Mortgage (UWM) seeks a Threat and Vulnerability Engineer to protect digital assets across networks, apps, cloud, and endpoints. You will conduct scans, analyze results, and guide remediation while collaborating with IT and Dev teams.

Strong scripting and security expertise are essential for continuous improvement of UWM’s security posture. The role emphasizes threat intelligence, incident response support, and developing security controls.