> Markdown version of [/jobs/ext/4336371-incident-responder-digital-forensics](https://www.wearedevelopers.com/jobs/ext/4336371-incident-responder-digital-forensics). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Incident Responder- Digital Forensics

- **Company:** United Wholesale Mortgage
- **Location:** Pontiac, MI, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Data Analysis, Cyber Security, Computer Networks, Digital Forensics, Intrusion Detection and Prevention, Intrusion Detection Systems, Log Files, Network Protocols, Security Information and Event Management, Cyber Threat Analysis, Information Technology
- **Published:** October 17, 2026
- **Apply:** https://www.thejobnetwork.com/job/4a33caba-76ba-4e0e-aabf-c7a6271f2d5e/incident-responder-digital-forensics

## About the Role

Must-Have Qualifications:

 * Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related field
 * 3-5 years of experience in incident response, digital forensics, and cybersecurity operations
 * Strong understanding of network protocols, operating systems, and security technologies.
 * Prior experience mentoring others
 * Proven experience with security information and event management (SIEM) tools, intrusion detection/prevention systems (IDS/IPS), and endpoint security solutions.
 * Strong analytical and problem-solving skills, with a proactive and self-starter mindset.
 * Excellent communication and interpersonal skills, with the ability to work effectively in a fast-paced environment and manage multiple priorities.
 * Commitment to continuous improvement and staying current with the latest security trends and best practices.
 * Ability to work 100% on-site in Pontiac, MI

## Description

* Incident Detection and Analysis:

 * Lead the monitoring of security alerts and events from various sources including SIEM systems, IDS/IPS, firewalls, and endpoint security solutions.
 * Perform initial triage, validation, and classification of incidents to determine the severity and potential impact.
 * Conduct in-depth analysis of security incidents to identify the root cause and understand the attack vectors.

Incident Response and Remediation:

 * Respond promptly to cybersecurity incidents following established incident response procedures.
 * Contain and eradicate threats by isolating affected systems, removing malicious artifacts, and applying necessary patches or configurations.
 * Coordinate with IT and other relevant teams to ensure effective incident resolution and system recovery.

Forensic Investigation:

 * Lead and conduct digital forensic investigations to collect and preserve evidence related to security incidents.
 * Analyze compromised systems, network traffic, and log files to reconstruct attack timelines and identify indicators of compromise (IOCs).
 * Prepare detailed incident reports and documentation for internal use and regulatory compliance.

Continuous Improvement:

 * Participate in post-incident reviews to identify lessons learned and recommend improvements to incident response processes and security controls.
 * Stay current with the latest cybersecurity threats, vulnerabilities, and attack techniques to enhance response capabilities.
 * Contribute to the development and maintenance of incident response playbooks, runbooks, and standard operating procedures.

Collaboration and Communication:

 * Work closely with other security team members, IT staff, and business units to ensure a coordinated and effective response to incidents.
 * Provide timely and clear communication to stakeholders regarding the status and impact of incidents.
 * Assist in conducting security awareness training and exercises to improve the organization's overall security posture.