Manages enterprise vulnerability scanning for servers and applications, conducts SAST, DAST, and IAST assessments, performs secure code reviews, and validates remediation. Supports DevSecOps security integrations within CI/CD pipelines, tracks security findings, coordinates risk remediation, and partners with development, infrastructure, and cloud teams on secure-by-design practices. Also supports audit, regulatory, continuous security assurance, and infrastructure scanning activities.
TransUnion's Job Applicant Privacy Notice
Team Overview
CIBIL Information Security > Security Operations and Engineering This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.Role Overview And Core Responsibilities
Key responsibilities include:
- Onboarding servers and applications to enterprise vulnerability scanning platforms.
- Executing and managing SAST, DAST, and IAST security assessments.
- Conducting secure code reviews and validating remediation of identified vulnerabilities.
- Supporting DevSecOps integration within CI/CD pipelines to enable automated security controls.
- Tracking, reporting, and driving closure of application and infrastructure security findings.
- Working with development, infrastructure, and cloud teams to ensure secure-by-design implementation.
- Supporting regulatory, audit, and compliance requirements through continuous security assurance activities.
- Support MBSS scanning for infrastructure systems including OS, network devices.
Required Knowledge And Experiences
- 2-3 years of experience in Vulnerability Assessment and Security Scanning of servers and applications.
- Hands-on experience with SAST, DAST, IAST, and Open Source Dependency Scanning tools.
- Knowledge of Secure Software Development Lifecycle (SSDLC) and secure coding principles (OWASP Top 10, CWE, SANS Top 25).
- Experience in security onboarding of applications and servers to enterprise security tools.
- Ability to perform secure code reviews and validate remediation of vulnerabilities.
- Understanding of CI/CD pipelines and integration of security controls within DevSecOps workflows.
- Familiarity with Linux, Windows, Web Applications, APIs, and Cloud environments.
- Experience in vulnerability tracking, reporting, and risk remediation coordination.
TransUnion Overview:
At TransUnion, we encourage and are committed to creating a real, positive impact and shared sense of purpose within our Workforce for Good, which empowers our people to grow, innovate and contribute to a better future for our communities and customers. We strive to build an environment where our associates are in the driver’s seat of their professional development— while having access to help along the way. We recognize that success comes when our associates thrive both professionally and personally; that’s why we prioritize work/life flexibility and offer resources for our teams across the globe to collaborate and drive excellence.
Be a part of our Workforce for Good – you’ll work with great people, pioneering products and cutting-edge technology.
TransUnion Job Title
Analyst, InfoSec Risk Management & Governance
TransUnion Pune, Mahārāshtra, IND Office
6th Floor, Tower B, Panschil Business Park, Vimanaggar, Pune, India, 411014
Similar Jobs at TransUnion
Big Data • Fintech • Information Technology • Business Intelligence • Financial Services • Cybersecurity • Big Data Analytics
Design and implement AI-powered applications for enterprise batch processing, including LLM applications, intelligent agents, RAG solutions, prompt engineering, fine-tuning, guardrails, and model evaluation. Automate batch trigger and workflow configuration management, support migration to Google Cloud, improve platform scalability and reliability, and develop AI-assisted testing automation.
Top Skills:
Agentic Ai ArchitecturesEmbedding ModelsGoogle Cloud Platform (Gcp)LangchainLanggraphLarge Language Models (Llms)Model EvaluationPrompt EngineeringPythonRest ApisRetrieval-Augmented Generation (Rag)SQLVector Databases
Big Data • Fintech • Information Technology • Business Intelligence • Financial Services • Cybersecurity • Big Data Analytics
Supports technology compliance monitoring reviews focused on IT General Controls, technology risk assessments, and regulatory requirements. Performs control testing, evaluates effectiveness, identifies deficiencies, documents findings, and supports remediation. Collaborates with Technology, Information Security, Internal Audit, Risk Management, and business teams. The role requires analyzing data, assessing access, change management, and IT operations controls, and communicating technical risks to stakeholders.
Top Skills:
ArcherAuditboardMetricstreamExcelMicrosoft PowerpointMicrosoft WordNistPci-DssRemedyServicenow GrcSoc 1Soc 2Sox Itgc
Big Data • Fintech • Information Technology • Business Intelligence • Financial Services • Cybersecurity • Big Data Analytics
Technical lead responsible for designing, developing, testing, and maintaining enterprise backend services in C#/.NET. Lead API and integration development, drive CI/CD and testing practices, troubleshoot production issues, mentor developers, and collaborate with product and architecture teams in an Agile environment to deliver scalable, secure solutions.
Top Skills:
.Net Core.Net FrameworkAzure DevopsC#Ci/CdGitGithub ActionsJenkinsRest ApisSQLWeb Services
What you need to know about the Pune Tech Scene
Once a far-out concept, AI is now a tangible force reshaping industries and economies worldwide. While its adoption will automate some roles, AI has created more jobs than it has displaced, with an expected 97 million new roles to be created in the coming years. This is especially true in cities like Pune, which is emerging as a hub for companies eager to leverage this technology to develop solutions that simplify and improve lives in sectors such as education, healthcare, finance, e-commerce and more.
