Manages enterprise vulnerability scanning for servers and applications, conducts SAST, DAST, and IAST assessments, performs secure code reviews, and validates remediation. Supports DevSecOps security integrations within CI/CD pipelines, tracks security findings, coordinates risk remediation, and partners with development, infrastructure, and cloud teams on secure-by-design practices. Also supports audit, regulatory, continuous security assurance, and infrastructure scanning activities.
TransUnion's Job Applicant Privacy Notice
Team Overview
CIBIL Information Security > Security Operations and Engineering This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.Role Overview And Core Responsibilities
Key responsibilities include:
- Onboarding servers and applications to enterprise vulnerability scanning platforms.
- Executing and managing SAST, DAST, and IAST security assessments.
- Conducting secure code reviews and validating remediation of identified vulnerabilities.
- Supporting DevSecOps integration within CI/CD pipelines to enable automated security controls.
- Tracking, reporting, and driving closure of application and infrastructure security findings.
- Working with development, infrastructure, and cloud teams to ensure secure-by-design implementation.
- Supporting regulatory, audit, and compliance requirements through continuous security assurance activities.
- Support MBSS scanning for infrastructure systems including OS, network devices.
Required Knowledge And Experiences
- 2-3 years of experience in Vulnerability Assessment and Security Scanning of servers and applications.
- Hands-on experience with SAST, DAST, IAST, and Open Source Dependency Scanning tools.
- Knowledge of Secure Software Development Lifecycle (SSDLC) and secure coding principles (OWASP Top 10, CWE, SANS Top 25).
- Experience in security onboarding of applications and servers to enterprise security tools.
- Ability to perform secure code reviews and validate remediation of vulnerabilities.
- Understanding of CI/CD pipelines and integration of security controls within DevSecOps workflows.
- Familiarity with Linux, Windows, Web Applications, APIs, and Cloud environments.
- Experience in vulnerability tracking, reporting, and risk remediation coordination.
TransUnion Overview:
At TransUnion, we encourage and are committed to creating a real, positive impact and shared sense of purpose within our Workforce for Good, which empowers our people to grow, innovate and contribute to a better future for our communities and customers. We strive to build an environment where our associates are in the driver’s seat of their professional development— while having access to help along the way. We recognize that success comes when our associates thrive both professionally and personally; that’s why we prioritize work/life flexibility and offer resources for our teams across the globe to collaborate and drive excellence.
Be a part of our Workforce for Good – you’ll work with great people, pioneering products and cutting-edge technology.
TransUnion Job Title
Analyst, InfoSec Risk Management & Governance
TransUnion Hyderabad, Telangana, IND Office
11th floor Jyothi Pinnacle, Hitech City Rd., Laxmi Cyber City, Whitefields, Kondapur, Hyderabad, India, 500081
Similar Jobs at TransUnion
Big Data • Fintech • Information Technology • Business Intelligence • Financial Services • Cybersecurity • Big Data Analytics
Leads TransUnion’s Record to Report accounting team in Pune, overseeing US GAAP month-end and quarter-end close, journal entries, reconciliations, audits, controls, KPI reporting, risk management, budgeting, and continuous improvement. The role manages multiple accounting teams, partners with controllers and global stakeholders, ensures service-level delivery, develops employees, and uses Tableau and Power BI dashboards to improve process performance.
Top Skills:
BlacklineExcelOnestreamOracle PeoplesoftPower BITableau
Big Data • Fintech • Information Technology • Business Intelligence • Financial Services • Cybersecurity • Big Data Analytics
Design and implement AI-powered applications for enterprise batch processing, including LLM applications, intelligent agents, RAG solutions, prompt engineering, fine-tuning, guardrails, and model evaluation. Automate batch trigger and workflow configuration management, support migration to Google Cloud, improve platform scalability and reliability, and develop AI-assisted testing automation.
Top Skills:
Agentic Ai ArchitecturesEmbedding ModelsGoogle Cloud Platform (Gcp)LangchainLanggraphLarge Language Models (Llms)Model EvaluationPrompt EngineeringPythonRest ApisRetrieval-Augmented Generation (Rag)SQLVector Databases
Big Data • Fintech • Information Technology • Business Intelligence • Financial Services • Cybersecurity • Big Data Analytics
Supports technology compliance monitoring reviews focused on IT General Controls, technology risk assessments, and regulatory requirements. Performs control testing, evaluates effectiveness, identifies deficiencies, documents findings, and supports remediation. Collaborates with Technology, Information Security, Internal Audit, Risk Management, and business teams. The role requires analyzing data, assessing access, change management, and IT operations controls, and communicating technical risks to stakeholders.
Top Skills:
ArcherAuditboardMetricstreamExcelMicrosoft PowerpointMicrosoft WordNistPci-DssRemedyServicenow GrcSoc 1Soc 2Sox Itgc
What you need to know about the Hyderabad Tech Scene
Because of its proximity to leading research institutions and a government committed to the city's growth, Hyderabad's tech scene is booming. With plans to establish India's first "AI city," the city is on track to become one of the world's most anticipated tech hubs, with companies like TransUnion, Schrödinger and Freshworks, among others, already calling the city home.
