Lead Offensive Security Engineer

About the Company

TransUnion is a global information and insights business that helps make trust possible in commerce. With more than 50 years of experience in credit reporting and data stewardship, the company has built a deep understanding of consumer identity and expanded its capabilities into fraud, marketing, and customer analytics through continued investment in data and technology.

Its purpose, referred to as Information for Good®, is to help people and organizations transact with confidence using a comprehensive view of each consumer built from online, offline, public, and proprietary data sources.

Job Description

The Lead Offensive Security Engineer will be responsible for carrying out penetration testing and related offensive security assessments across corporate systems, applications, and infrastructure. This role focuses on identifying weaknesses, validating security controls, and helping teams strengthen the overall security posture.

Key Responsibilities

• Perform network penetration tests to uncover vulnerabilities, insecure configurations, and possible attack paths.
• Run realistic attack simulations to evaluate the resilience of enterprise systems, applications, and infrastructure.
• Build and execute structured test plans covering reconnaissance, exploitation, post-exploitation, and documentation.
• Record results clearly, including severity assessments and practical remediation guidance.
• Work closely with IT and security stakeholders to verify fixes and support repeat testing when required.

Qualifications

The role calls for a strong offensive security background, sound technical knowledge of enterprise environments, and the ability to communicate findings effectively across teams. Experience with vulnerability tools, scripting, and coordination with internal stakeholders is important.

Technical Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, or a related discipline, or equivalent hands-on experience.
• At least 8 years of total experience in IT.
• More than 3 years of experience in penetration testing, ideally in internal or corporate settings.
• Strong knowledge of networking protocols, Windows and Linux environments, Active Directory, and standard enterprise technologies.
• Practical exposure to tools such as Nmap, Metasploit, Burp Suite, Nessus, and custom scripting utilities.
• Experience working with vulnerability management platforms and ticketing systems.
• Good planning, coordination, and communication skills for managing schedules and collaborating with stakeholders.
• Professional certifications such as OSCP, CEH, or GPEN are considered advantageous.

Eligibility

Any graduate may apply.