Manages enterprise vulnerability scanning for servers and applications, conducts SAST, DAST, and IAST assessments, performs secure code reviews, and validates remediation. Supports DevSecOps security integrations within CI/CD pipelines, tracks security findings, coordinates risk remediation, and partners with development, infrastructure, and cloud teams on secure-by-design practices. Also supports audit, regulatory, continuous security assurance, and infrastructure scanning activities.
TransUnion's Job Applicant Privacy Notice
Team Overview
CIBIL Information Security > Security Operations and Engineering This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.Role Overview And Core Responsibilities
Key responsibilities include:
- Onboarding servers and applications to enterprise vulnerability scanning platforms.
- Executing and managing SAST, DAST, and IAST security assessments.
- Conducting secure code reviews and validating remediation of identified vulnerabilities.
- Supporting DevSecOps integration within CI/CD pipelines to enable automated security controls.
- Tracking, reporting, and driving closure of application and infrastructure security findings.
- Working with development, infrastructure, and cloud teams to ensure secure-by-design implementation.
- Supporting regulatory, audit, and compliance requirements through continuous security assurance activities.
- Support MBSS scanning for infrastructure systems including OS, network devices.
Required Knowledge And Experiences
- 2-3 years of experience in Vulnerability Assessment and Security Scanning of servers and applications.
- Hands-on experience with SAST, DAST, IAST, and Open Source Dependency Scanning tools.
- Knowledge of Secure Software Development Lifecycle (SSDLC) and secure coding principles (OWASP Top 10, CWE, SANS Top 25).
- Experience in security onboarding of applications and servers to enterprise security tools.
- Ability to perform secure code reviews and validate remediation of vulnerabilities.
- Understanding of CI/CD pipelines and integration of security controls within DevSecOps workflows.
- Familiarity with Linux, Windows, Web Applications, APIs, and Cloud environments.
- Experience in vulnerability tracking, reporting, and risk remediation coordination.
TransUnion Overview:
At TransUnion, we encourage and are committed to creating a real, positive impact and shared sense of purpose within our Workforce for Good, which empowers our people to grow, innovate and contribute to a better future for our communities and customers. We strive to build an environment where our associates are in the driver’s seat of their professional development— while having access to help along the way. We recognize that success comes when our associates thrive both professionally and personally; that’s why we prioritize work/life flexibility and offer resources for our teams across the globe to collaborate and drive excellence.
Be a part of our Workforce for Good – you’ll work with great people, pioneering products and cutting-edge technology.
TransUnion Job Title
Analyst, InfoSec Risk Management & Governance
TransUnion Bengaluru, Karnataka, IND Office
Primeco Towers - 5th floor, Bannerughatta Rd., Arekere MICO Layout, Main Rd. Panduranga Nagar, Bengaluru, India, 560076
Similar Jobs at TransUnion
Big Data • Fintech • Information Technology • Business Intelligence • Financial Services • Cybersecurity • Big Data Analytics
Technical lead responsible for designing, developing, testing, and maintaining enterprise backend services in C#/.NET. Lead API and integration development, drive CI/CD and testing practices, troubleshoot production issues, mentor developers, and collaborate with product and architecture teams in an Agile environment to deliver scalable, secure solutions.
Top Skills:
.Net Core.Net FrameworkAzure DevopsC#Ci/CdGitGithub ActionsJenkinsRest ApisSQLWeb Services
Big Data • Fintech • Information Technology • Business Intelligence • Financial Services • Cybersecurity • Big Data Analytics
Processes and fulfills transactional, batch, and self-service data delivery requests for internal and external customers. Transforms and cleanses data, configures scripts, creates and executes test plans, performs quality checks, audits results, and delivers accurate files and reports within service-level agreements. Collaborates with batch production and client engagement teams, reviews technical requirements, and contributes to modernization initiatives.
Top Skills:
ETLHiveMS OfficePysparkPythonSparkSQLUnix/Linux
Big Data • Fintech • Information Technology • Business Intelligence • Financial Services • Cybersecurity • Big Data Analytics
Designs, develops, and maintains scalable React and TypeScript web applications. Leads front-end architecture, performance optimization, reusable component and design system development, state management, API integration, accessibility, automated testing, CI/CD improvements, and production troubleshooting. Provides technical leadership through code reviews, standards enforcement, architectural evaluations, and mentoring of junior and mid-level engineers while ensuring security, privacy, regulatory, and reliability requirements are met.
Top Skills:
BabelCi/CdContext ApiCSS3CypressGitGraphQLHTML5JavaScriptJestNext.JsNgrxNxPlaywrightReact Testing LibraryReactRedux ToolkitRemixRest ApisSassStyled ComponentsTailwind CssTurborepoTypescriptViteWebpackZustand
What you need to know about the Bengaluru Tech Scene
Dubbed the "Silicon Valley of India," Bengaluru has emerged as the nation's leading hub for information technology and a go-to destination for startups. Home to tech giants like ISRO, Infosys, Wipro and HAL, the city attracts and cultivates a rich pool of tech talent, supported by numerous educational and research institutions including the Indian Institute of Science, Bangalore Institute of Technology, and the International Institute of Information Technology.
