Lead security automation engineering for an agentic AI SOC platform. Responsibilities include migrating Splunk SOAR playbooks, designing AI-driven triage workflows, integrating SIEM, EDR, threat intelligence, case management, and ITSM systems, and building Python tools and APIs. The role also improves case-management workflows, operationalizes detections, establishes engineering standards, measures automation outcomes, documents runbooks, and mentors or leads technical workstreams.
TransUnion's Job Applicant Privacy Notice
Team Overview
At TransUnion, we have a welcoming and energetic environment that encourages collaboration andinnovation. We’re consistently exploring new technologies and tools. This environment gives our
people the opportunity to hone current skills and build new capabilities, while discovering their
genius. This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.
Role Overview And Core Responsibilities
What You'll Do:
- Design, build, and maintain security response automations on our agentic AI SOC platform, and help lead the migration of existing Splunk SOAR playbooks
- Build agentic workflows end to end: prompt and agent design, tool integration,
- guardrails, output evaluation, and human-in-the-loop review for AI-driven triage and response
- Develop and maintain integrations across the security stack (SIEM, EDR, threat intelligence, case management, ITSM) using REST APIs, webhooks, and event-driven patterns
- Build internal tools, services, and APIs, primarily in Python, that extend platform capability and reduce analyst toil
- Administer and improve the case management platform and its workflows
- Partner with detection engineering to operationalize new detections into automated response
- Contribute to shared engineering standards: Git-based workflows, code review, testing, and CI/CD
- Measure what you build: automation throughput, MTTR, false-positive burden, and analyst time saved
- Write clear documentation and runbooks; collaborate effectively across a global, distributed team
Required Knowledge And Experiences
What You'll Bring:
- 5+ years in security engineering, security automation, or software engineering with a strong security focus
- Strong Python in production settings, with solid command of REST
- APIs, JSON, webhooks, and authentication patterns (OAuth, API keys, secrets handling)
- Hands-on experience with SOAR or security automation platforms
- (Splunk SOAR, XSOAR, Tines, Torq, or similar)
- Experience building with modern LLM platforms (Anthropic Claude,
- OpenAI, Amazon Bedrock, or similar): using APIs, SDKs, and tool-use patterns to build tools, integrations, and agents, with practical prompt and agent design and evaluation of model output for reliability and safety
- Software engineering fundamentals: Git, code review, automated testing, CI/CD
- Working knowledge of SOC operations and incident response workflows; familiarity with MITRE ATT&CK
- Strong documentation habits and written communication; effective in a distributed global team
We'd Love to See:
- Experience with agentic AI security platforms, or building autonomous
- or semi-autonomous agent systems in production
- Fine-tuning, systematic evaluation (evals), or red-teaming of LLMs
- Comfort using AI-assisted development tools (Claude Code, Cursor,
- Copilot) as part of a disciplined engineering workflow
- Splunk Enterprise Security exposure (SPL, detection logic) or detec‐
- tion-as-code experience
- Case management or ITSM platform experience (ServiceNow or
- similar)
- Web service development (FastAPI, Flask, or similar); front-end expo‐
- sure a plus
- AWS, Docker/Kubernetes, Terraform; DevOps background
- Experience mentoring engineers or leading technical workstreams
TransUnion Overview:
At TransUnion, we encourage and are committed to creating a real, positive impact and shared sense of purpose within our Workforce for Good, which empowers our people to grow, innovate and contribute to a better future for our communities and customers. We strive to build an environment where our associates are in the driver’s seat of their professional development— while having access to help along the way. We recognize that success comes when our associates thrive both professionally and personally; that’s why we prioritize work/life flexibility and offer resources for our teams across the globe to collaborate and drive excellence.
Be a part of our Workforce for Good – you’ll work with great people, pioneering products and cutting-edge technology.
TransUnion Job Title
Lead Engineer, Cybersecurity
TransUnion Bengaluru, Karnataka, IND Office
Primeco Towers - 5th floor, Bannerughatta Rd., Arekere MICO Layout, Main Rd. Panduranga Nagar, Bengaluru, India, 560076
Similar Jobs at TransUnion
Big Data • Fintech • Information Technology • Business Intelligence • Financial Services • Cybersecurity • Big Data Analytics
Design and enforce LLM guardrails and secure AI agent execution; implement cloud DLP and IAM across AWS/GCP; integrate security into CI/CD using Harness; secure artifacts in JFrog Artifactory; conduct threat modeling for LLMs, RAG pipelines, and agentic workflows; develop AI-driven security scanning.
Top Skills:
Agent GatewayAWSCi/CdDlpDockerGCPGoHarnessIamJfrog ArtifactoryKubernetesLlama GuardLlmsModel Armor GuardrailsPythonRag
Big Data • Fintech • Information Technology • Business Intelligence • Financial Services • Cybersecurity • Big Data Analytics
Leads technical product strategy, roadmaps, and end-to-end delivery of scalable marketing technology platforms. Partners with Engineering, Architecture, Data, Design, and business stakeholders on integrations, APIs, data flows, and platform architecture. Prioritizes initiatives, manages dependencies, establishes KPIs, and drives agile delivery. Mentors and manages Technical Product Managers while overseeing products from ideation through launch and iteration.
Top Skills:
AgileAPIs
Big Data • Fintech • Information Technology • Business Intelligence • Financial Services • Cybersecurity • Big Data Analytics
Manage IT solution and technical support delivery using Scrum and Agile practices. Coach teams, facilitate PI and sprint planning and ceremonies, coordinate dependencies, support roadmap planning, track milestones, mitigate risks, remove impediments, and manage capitalization and change processes. Oversee technology vendor relationships, service delivery, IT staff, policies, and cross-functional partnerships while ensuring projects remain on schedule, within budget, and clearly communicated to stakeholders.
Top Skills:
AgileScrum
What you need to know about the Bengaluru Tech Scene
Dubbed the "Silicon Valley of India," Bengaluru has emerged as the nation's leading hub for information technology and a go-to destination for startups. Home to tech giants like ISRO, Infosys, Wipro and HAL, the city attracts and cultivates a rich pool of tech talent, supported by numerous educational and research institutions including the Indian Institute of Science, Bangalore Institute of Technology, and the International Institute of Information Technology.
