Manages enterprise vulnerability scanning for servers and applications, conducts SAST, DAST, and IAST assessments, performs secure code reviews, and validates remediation. Supports DevSecOps security integrations within CI/CD pipelines, tracks security findings, coordinates risk remediation, and partners with development, infrastructure, and cloud teams on secure-by-design practices. Also supports audit, regulatory, continuous security assurance, and infrastructure scanning activities.
TransUnion's Job Applicant Privacy Notice
Team Overview
CIBIL Information Security > Security Operations and Engineering This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.Role Overview And Core Responsibilities
Key responsibilities include:
- Onboarding servers and applications to enterprise vulnerability scanning platforms.
- Executing and managing SAST, DAST, and IAST security assessments.
- Conducting secure code reviews and validating remediation of identified vulnerabilities.
- Supporting DevSecOps integration within CI/CD pipelines to enable automated security controls.
- Tracking, reporting, and driving closure of application and infrastructure security findings.
- Working with development, infrastructure, and cloud teams to ensure secure-by-design implementation.
- Supporting regulatory, audit, and compliance requirements through continuous security assurance activities.
- Support MBSS scanning for infrastructure systems including OS, network devices.
Required Knowledge And Experiences
- 2-3 years of experience in Vulnerability Assessment and Security Scanning of servers and applications.
- Hands-on experience with SAST, DAST, IAST, and Open Source Dependency Scanning tools.
- Knowledge of Secure Software Development Lifecycle (SSDLC) and secure coding principles (OWASP Top 10, CWE, SANS Top 25).
- Experience in security onboarding of applications and servers to enterprise security tools.
- Ability to perform secure code reviews and validate remediation of vulnerabilities.
- Understanding of CI/CD pipelines and integration of security controls within DevSecOps workflows.
- Familiarity with Linux, Windows, Web Applications, APIs, and Cloud environments.
- Experience in vulnerability tracking, reporting, and risk remediation coordination.
TransUnion Overview:
At TransUnion, we encourage and are committed to creating a real, positive impact and shared sense of purpose within our Workforce for Good, which empowers our people to grow, innovate and contribute to a better future for our communities and customers. We strive to build an environment where our associates are in the driver’s seat of their professional development— while having access to help along the way. We recognize that success comes when our associates thrive both professionally and personally; that’s why we prioritize work/life flexibility and offer resources for our teams across the globe to collaborate and drive excellence.
Be a part of our Workforce for Good – you’ll work with great people, pioneering products and cutting-edge technology.
TransUnion Job Title
Analyst, InfoSec Risk Management & Governance
TransUnion Mumbai, Maharashtra, IND Office
One Indiabulls, 7th floor, Mumbai, India, 400013
Similar Jobs at TransUnion
Big Data • Fintech • Information Technology • Business Intelligence • Financial Services • Cybersecurity • Big Data Analytics
Supports technology compliance monitoring reviews focused on IT General Controls, technology risk assessments, and regulatory requirements. Performs control testing, evaluates effectiveness, identifies deficiencies, documents findings, and supports remediation. Collaborates with Technology, Information Security, Internal Audit, Risk Management, and business teams. The role requires analyzing data, assessing access, change management, and IT operations controls, and communicating technical risks to stakeholders.
Top Skills:
ArcherAuditboardMetricstreamExcelMicrosoft PowerpointMicrosoft WordNistPci-DssRemedyServicenow GrcSoc 1Soc 2Sox Itgc
Big Data • Fintech • Information Technology • Business Intelligence • Financial Services • Cybersecurity • Big Data Analytics
Technical lead responsible for designing, developing, testing, and maintaining enterprise backend services in C#/.NET. Lead API and integration development, drive CI/CD and testing practices, troubleshoot production issues, mentor developers, and collaborate with product and architecture teams in an Agile environment to deliver scalable, secure solutions.
Top Skills:
.Net Core.Net FrameworkAzure DevopsC#Ci/CdGitGithub ActionsJenkinsRest ApisSQLWeb Services
Big Data • Fintech • Information Technology • Business Intelligence • Financial Services • Cybersecurity • Big Data Analytics
Processes and fulfills transactional, batch, and self-service data delivery requests for internal and external customers. Transforms and cleanses data, configures scripts, creates and executes test plans, performs quality checks, audits results, and delivers accurate files and reports within service-level agreements. Collaborates with batch production and client engagement teams, reviews technical requirements, and contributes to modernization initiatives.
Top Skills:
ETLHiveMS OfficePysparkPythonSparkSQLUnix/Linux
What you need to know about the Mumbai Tech Scene
From haggling for the best price at Chor Bazaar to the bustle of Crawford Market, the energy of Mumbai's traditional markets is a key part of the city's charm. And while these markets will always have their place, the city also boasts a thriving e-commerce scene, ranking among the largest in the region. Driven by online sales in everything from snacks to licensed sports merchandise to children's apparel, the local industry is worth billions, with companies actively recruiting to meet the demands of continued growth.
