Senior Threat and Vulnerability Engineer

United Wholesale Mortgage (UWM) is seeking a skilled Threat and Vulnerability Engineer to help protect our digital assets, data, and infrastructure from evolving cyber threats. This role identifies, assesses, prioritizes, and supports remediation of vulnerabilities across networks, applications, cloud environments, and endpoints. The ideal candidate brings strong security expertise, a proactive mindset, and a commitment to continuously improving UWM’s security posture.

At UWM, we prioritize innovation and security in all our operations. As the Threat and Vulnerability Engineer, you will play a critical role in strengthening our security stance and safeguarding our systems and data. If you are a passionate security practitioner with a strong background in threat and vulnerability management, we invite you to apply and contribute to our mission of delivering secure and trustworthy solutions in the mortgage industry.

This position is not eligible for employer-sponsored work authorization, either now or in the future. Applicants must be authorized to work in the United States without employer sponsorship.

• Vulnerability Management:
• Conduct regular and ad-hoc vulnerability scans across UWM's IT environment (servers, workstations, network devices, cloud platforms, web applications).
• Analyze scan results, identify false positives, and prioritize vulnerabilities based on risk, severity, and potential business impact.
• Assist with optimization of vulnerability management tools and platforms, ensuring accurate and comprehensive coverage.
• Threat Intelligence & Research:
• Stay current with the latest cybersecurity threats, vulnerabilities, attack techniques, and industry best practices.
• Research and evaluate new tools, technologies, and methodologies to enhance UWM's security stance.
• Contribute to threat modeling exercises for new and existing systems.
• Remediation & Collaboration:
• Work closely with IT operations, development teams, and other stakeholders to communicate vulnerability findings and guide remediation efforts.
• Track remediation progress, validate fixes, and report on the overall vulnerability management lifecycle.
• Develop and implement security controls and processes to mitigate identified risks.
• Reporting & Documentation:
• Generate clear and concise reports on vulnerability status, remediation efforts, and security posture for various audiences.
• Maintain accurate documentation of security processes, procedures, and configurations.
• Incident Response Support:
• Assist the Security Operations Center (SOC) and Incident Response teams during security incidents, providing expertise on vulnerability context and potential attack vectors.

Must Have Qualifications:

• Bachelor’s degree in computer science, Information Security, or a related technical field, or equivalent practical experience.
• 5+ years of experience in information security, with a strong focus on vulnerability management, penetration testing, or security engineering.
• Solid understanding of networking protocols (TCP/IP, DNS, HTTP), operating systems (Windows, Linux), and common enterprise applications.
• Proficiency with industry-standard vulnerability scanning tools.
• Experience with web application security testing tools and understanding of the OWASP Top 10.
• Familiarity with cloud security principles and practices (AWS, Azure, or GCP).
• Knowledge of common security frameworks and compliance requirements (e.g., NIST, ISO 27001, GLBA).
• Scripting skills (e.g., Python, PowerShell, Bash) for automation and analysis.
• Strong analytical, problem-solving, and critical thinking skills.
• Excellent written and verbal communication skills, with the ability to convey complex technical information to both technical and non-technical audiences.
• Ability to work independently and collaboratively in a fast-paced, dynamic environment.

Nice to Have Qualifications:

• Relevant security certifications (e.g., CISSP, OSCP, CEH, CompTIA Security+, GIAC certifications such as GSEC, GWAPT, GPEN).
• Familiarity with DevSecOps principles and integrating security into the CI/CD pipeline.
• Experience in the financial services or mortgage industry.

Ready to join thousands of talented team members who are making the dream of home ownership possible for more Americans? It’s all happening on UWM’s campus, where our award-winning workplace packs plenty of perks and amenities that keep the atmosphere buzzing with energy and excitement.

It’s no wonder that out of our six pillars, People Are Our Greatest Asset is number one. It’s at the very heart of how we treat each other, our clients and our community. Whether it’s providing elite client service or continuously striving to improve, our pillars provide a pathway to a more successful personal and professional life.

From the team member that holds a door open to the one that helps guide your career, you’ll feel the encouragement and support on day one. No matter your race, creed, gender, age, sexual orientation and ethnicity, you’ll be welcomed here. Accepted here. And empowered to Be You Here.

More reasons you’ll love working here include:

• Paid Time Off (PTO) after just 30 days
• Additional parental and maternity leave benefits after 12 months
• Adoption reimbursement program
• Paid volunteer hours
• Paid training and career development
• Medical, dental, vision and life insurance
• 401k with employer match
• Mortgage discount and area business discounts
• Free membership to our large, state-of-the-art fitness center, including exercise classes such as yoga and Zumba, various sports leagues and a full-size basketball court
• Wellness area, including an in-house primary-care physician’s office, full-time massage therapist and hair salon 
• Gourmet cafeteria featuring homemade breakfast and lunch
• Convenience store featuring healthy grab-and-go snacks
• In-house Starbucks and Dunkin
• Indoor/outdoor café with Wi-Fi