Analyst Information Security

TransUnion; Mumbai; Hybrid; INR 1,200,000 - 1,800,000; Full time

Job summary

TransUnion is hiring an Analyst, InfoSec Risk Management & Governance in a hybrid role, requiring 2-3 years in vulnerability assessment and security scanning. You will perform secure code reviews, integrate security into CI/CD, and coordinate remediation with development and operations teams.

The role involves secure-by-design practices across Linux, Windows, APIs, and cloud environments, with regulatory and audit support as part of ongoing security assurance activities.

Qualifications

• 2-3 years of experience in Vulnerability Assessment and Security Scanning of servers and applications.
• Hands-on experience with SAST, DAST, IAST, and Open Source Dependency Scanning tools.
• Knowledge of Secure Software Development Lifecycle (SSDLC) and secure coding principles (OWASP Top 10, CWE, SANS Top 25).
• Experience in security onboarding of applications and servers to enterprise security tools.
• Ability to perform secure code reviews and validate remediation of vulnerabilities.
• Understanding of CI/CD pipelines and integration of security controls within DevSecOps workflows.

Responsibilities

• Onboarding servers and applications to enterprise vulnerability scanning platforms.
• Executing and managing SAST, DAST, and IAST security assessments.
• Conducting secure code reviews and validating remediation of identified vulnerabilities.
• Supporting DevSecOps integration within CI/CD pipelines to enable automated security controls.
• Tracking, reporting, and driving closure of application and infrastructure security findings.
• Working with development, infrastructure, and cloud teams to ensure secure-by-design implementation.
• Supporting regulatory, audit, and compliance requirements through continuous security assurance activities.
• Support MBSS scanning for infrastructure systems including OS, network devices.

Skills

Vulnerability assessment

SAST

DAST

IAST

Open Source Dependency Scanning

SSDLC

OWASP Top 10

CI/CD security

Secure code reviews

Linux

Windows

APIs

Cloud environments

Tools

SAST tools

DAST tools

IAST tools

Job description

TransUnion's Job Applicant Privacy Notice

Team Overview

CIBIL Information Security > Security Operations and EngineeringThis is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.

Role Overview And Core Responsibilities

Key responsibilities include:

• Onboarding servers and applications to enterprise vulnerability scanning platforms.
• Executing and managing SAST, DAST, and IAST security assessments.
• Conducting secure code reviews and validating remediation of identified vulnerabilities.
• Supporting DevSecOps integration within CI/CD pipelines to enable automated security controls.
• Tracking, reporting, and driving closure of application and infrastructure security findings.
• Working with development, infrastructure, and cloud teams to ensure secure-by-design implementation.
• Supporting regulatory, audit, and compliance requirements through continuous security assurance activities.
• Support MBSS scanning for infrastructure systems including OS, network devices.

Required Knowledge And Experiences

• 2-3 years of experience in Vulnerability Assessment and Security Scanning of servers and applications.
• Hands-on experience with SAST, DAST, IAST, and Open Source Dependency Scanning tools.
• Knowledge of Secure Software Development Lifecycle (SSDLC) and secure coding principles (OWASP Top 10, CWE, SANS Top 25).
• Experience in security onboarding of applications and servers to enterprise security tools.
• Ability to perform secure code reviews and validate remediation of vulnerabilities.
• Understanding of CI/CD pipelines and integration of security controls within DevSecOps workflows.
• Familiarity with Linux, Windows, Web Applications, APIs, and Cloud environments.
• Experience in vulnerability tracking, reporting, and risk remediation coordination.

TransUnion Overview:

At TransUnion, we encourage and are committed to creating a real, positive impact and shared sense of purpose within our Workforce for Good , which empowers our people to grow, innovate and contribute to a better future for our communities and customers. We strive to build an environment where our associates are in the driver's seat of their professional development - while having access to help along the way. We recognize that success comes when our associates thrive both professionally and personally; that's why we prioritize work/life flexibility and offer resources for our teams across the globe to collaborate and drive excellence.

Be a part of our Workforce for Good - you'll work with great people, pioneering products and cutting-edge technology.

TransUnion Job Title

Analyst, InfoSec Risk Management & Governance