Offensive Security Engineer

TransUnion's Job Applicant Privacy Notice

What We'll Bring:

We are seeking a skilled and detail-oriented Network Penetration Tester to join our cybersecurity team. This role combines hands-on technical expertise in identifying and mitigating vulnerabilities within corporate networks with operational responsibilities for scheduling and coordinating penetration testing activities across the organization.

What You'll Bring:

Key Responsibilities:

Penetration Testing:

• Conduct internal network penetration tests to identify vulnerabilities, misconfigurations, and potential attack vectors.
• Simulate real-world attacks to assess the security posture of corporate systems, applications, and infrastructure.
• Develop and execute test plans, including reconnaissance, exploitation, post-exploitation, and reporting.
• Document findings with clear risk ratings and remediation recommendations.
• Collaborate with IT and security teams to validate fixes and retest as needed.

Scheduling & Coordination:

• Manage the penetration testing calendar, ensuring tests are scheduled in alignment with business priorities and compliance requirements.
• Coordinate with internal stakeholders and external vendors (if applicable) to plan and execute tests.
• Track testing progress, deliverables, and deadlines.
• Maintain records of completed tests, findings, and remediation status.

Qualifications:

• Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
• 3+ Years Experience in penetration testing, preferably in internal/corporate environments.
• Strong understanding of networking protocols, Windows/Linux environments, Active Directory, and common enterprise technologies.
• Familiarity with tools such as Nmap, Metasploit, Burp Suite, Nessus, and custom scripts.
• Experience with vulnerability management platforms and ticketing systems.
• Excellent organizational and communication skills for scheduling and stakeholder coordination.
• Certifications such as OSCP, CEH, GPEN, or similar are a plus.

Impact You'll Make:

Preferred Skills:

• Experience with automated testing frameworks and scripting (Python, PowerShell, Bash).
• Knowledge of compliance frameworks (e.g., NIST, ISO 27001, PCI-DSS).
• Ability to work independently and manage multiple concurrent projects.

This is a remote position which may require occasional in-person attendance at work-related events at the discretion of management.

TransUnion Job Title

Lead Engineer, InfoSec Engineering