TransUnion's Job Applicant Privacy Notice
Team Overview
At TransUnion, we have a welcoming and energetic environment that encourages collaboration andinnovation. We’re consistently exploring new technologies and tools. This environment gives our
people the opportunity to hone current skills and build new capabilities, while discovering their
genius. This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.
Role Overview And Core Responsibilities
What You'll Do:
- Design, build, and maintain security response automations on our agentic AI SOC platform, and help lead the migration of existing Splunk SOAR playbooks
- Build agentic workflows end to end: prompt and agent design, tool integration,
- guardrails, output evaluation, and human-in-the-loop review for AI-driven triage and response
- Develop and maintain integrations across the security stack (SIEM, EDR, threat intelligence, case management, ITSM) using REST APIs, webhooks, and event-driven patterns
- Build internal tools, services, and APIs, primarily in Python, that extend platform capability and reduce analyst toil
- Administer and improve the case management platform and its workflows
- Partner with detection engineering to operationalize new detections into automated response
- Contribute to shared engineering standards: Git-based workflows, code review, testing, and CI/CD
- Measure what you build: automation throughput, MTTR, false-positive burden, and analyst time saved
- Write clear documentation and runbooks; collaborate effectively across a global, distributed team
Required Knowledge And Experiences
What You'll Bring:
- 5+ years in security engineering, security automation, or software engineering with a strong security focus
- Strong Python in production settings, with solid command of REST
- APIs, JSON, webhooks, and authentication patterns (OAuth, API keys, secrets handling)
- Hands-on experience with SOAR or security automation platforms
- (Splunk SOAR, XSOAR, Tines, Torq, or similar)
- Experience building with modern LLM platforms (Anthropic Claude,
- OpenAI, Amazon Bedrock, or similar): using APIs, SDKs, and tool-use patterns to build tools, integrations, and agents, with practical prompt and agent design and evaluation of model output for reliability and safety
- Software engineering fundamentals: Git, code review, automated testing, CI/CD
- Working knowledge of SOC operations and incident response workflows; familiarity with MITRE ATT&CK
- Strong documentation habits and written communication; effective in a distributed global team
We'd Love to See:
- Experience with agentic AI security platforms, or building autonomous
- or semi-autonomous agent systems in production
- Fine-tuning, systematic evaluation (evals), or red-teaming of LLMs
- Comfort using AI-assisted development tools (Claude Code, Cursor,
- Copilot) as part of a disciplined engineering workflow
- Splunk Enterprise Security exposure (SPL, detection logic) or detec‐
- tion-as-code experience
- Case management or ITSM platform experience (ServiceNow or
- similar)
- Web service development (FastAPI, Flask, or similar); front-end expo‐
- sure a plus
- AWS, Docker/Kubernetes, Terraform; DevOps background
- Experience mentoring engineers or leading technical workstreams
TransUnion Overview:
At TransUnion, we encourage and are committed to creating a real, positive impact and shared sense of purpose within our Workforce for Good, which empowers our people to grow, innovate and contribute to a better future for our communities and customers. We strive to build an environment where our associates are in the driver’s seat of their professional development— while having access to help along the way. We recognize that success comes when our associates thrive both professionally and personally; that’s why we prioritize work/life flexibility and offer resources for our teams across the globe to collaborate and drive excellence.
Be a part of our Workforce for Good – you’ll work with great people, pioneering products and cutting-edge technology.
TransUnion Job Title
Lead Engineer, Cybersecurity
Skills Required
- 5+ years of experience in security engineering, security automation, or software engineering with a strong security focus
- Strong production Python experience
- Experience with REST APIs, JSON, webhooks, OAuth, API keys, and secrets handling
- Hands-on experience with SOAR or security automation platforms
- Experience building with modern LLM platforms, APIs, SDKs, tool-use patterns, prompt design, agent design, and model-output evaluation
- Software engineering fundamentals including Git, code review, automated testing, and CI/CD
- Working knowledge of SOC operations and incident response workflows
- Familiarity with MITRE ATT&CK
- Strong documentation and written communication skills
- Experience with agentic AI security platforms or autonomous or semi-autonomous production agent systems
- Experience with LLM fine-tuning, systematic evaluations, or red-teaming
- Experience using AI-assisted development tools such as Claude Code, Cursor, or Copilot
- Splunk Enterprise Security, SPL, detection logic, or detection-as-code experience
- Case management or ITSM platform experience, such as ServiceNow
- Web service development experience with FastAPI, Flask, or similar
- AWS, Docker, Kubernetes, Terraform, or DevOps experience
- Experience mentoring engineers or leading technical workstreams
What the Team is Saying
TransUnion Compensation & Benefits Highlights
-
Healthcare Strength — Health coverage is described as strong, with multiple plan choices, reasonable deductibles, and access to mental‑health resources like Spring Health.
-
Leave & Time Off Breadth — Flexible Time Off for salaried roles, PTO for hourly roles, paid holidays, wellness days, and hybrid flexibility underpin generous time‑away options.
-
Parental & Family Support — Parental and caregiver benefits are emphasized, including 12 weeks of paid parental leave with a gradual return, adoption assistance, dependent‑care FSA, and Care@Work backup care from day one.
TransUnion Insights
What We Do
TransUnion is a global information and insights company that makes trust possible by ensuring that each consumer is reliably and safely represented in the marketplace. We do this by having an accurate and comprehensive picture of each person. This picture is grounded in our legacy as a credit reporting agency which enables us to tap into both credit and public record data; our data fusion methodology that helps us link, match and tap into the awesome combined power of that data; and our knowledgeable and passionate team, who stewards the information with expertise, and in accordance with local legislation around the world. Because of our work, organizations can better understand consumers in order to make more informed decisions, and earn their trust through great, personalized experiences, and the proactive extension of the right opportunities, tools and offers. In turn, consumers can be confident that their data identities will result in the opportunities they deserve. We make trust possible, so businesses and consumers can transact with confidence and achieve great things. We call this Information for Good®—it’s our purpose, and what drives us every day.
Why Work With Us
Our culture is welcoming, energetic and innovative. There’s an overall synergy that flows throughout TransUnion, creating a sense of unity in knowing that we’re all working to achieve the same overall goal. We’re dedicated to providing opportunities for our people to get involved and stay connected with their colleagues across the globe.
Gallery
TransUnion Teams
TransUnion Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
