Analyst Information Security

TransUnion; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

TransUnion in Pune, India offers a hybrid role in Security Operations and Engineering within the Privacy Notice team. The role focuses on onboarding, vulnerability scanning, and secure development practices across cloud and on-prem environments.

The ideal candidate has 2-3 years in vulnerability assessment, SAST/DAST/IAST, and DevSecOps, with knowledge of SSDLC and OWASP Top 10. You will collaborate with developers, infrastructure, and security teams to deliver secure-by-design solutions.

Qualifications

• 2-3 years of experience in Vulnerability Assessment and Security Scanning of servers and applications.
• Hands-on experience with SAST, DAST, IAST, and Open Source Dependency Scanning tools.
• Knowledge of Secure Software Development Lifecycle (SSDLC) and secure coding principles (OWASP Top 10, CWE, SANS Top 25).
• Experience in security onboarding of applications and servers to enterprise security tools.
• Ability to perform secure code reviews and validate remediation of vulnerabilities.
• Understanding of CI/CD pipelines and integration of security controls within DevSecOps workflows.
• Familiarity with Linux, Windows, Web Applications, APIs, and Cloud environments.
• Experience in vulnerability tracking, reporting, and risk remediation coordination.

Responsibilities

• Onboarding servers and applications to enterprise vulnerability scanning platforms.
• Executing and managing SAST, DAST, and IAST security assessments.
• Conducting secure code reviews and validating remediation of identified vulnerabilities.
• Supporting DevSecOps integration within CI/CD pipelines to enable automated security controls.
• Tracking, reporting, and driving closure of application and infrastructure security findings.
• Working with development, infrastructure, and cloud teams to ensure secure-by-design implementation.
• Supporting regulatory, audit, and compliance requirements through continuous security assurance activities.
• Support MBSS scanning for infrastructure systems including OS, network devices.

Skills

Vulnerability assessment

SAST

DAST

IAST

OSS scanning

SSDLC

OWASP Top 10

Secure coding

DevSecOps

CI/CD security

Linux

Windows

APIs

Cloud environments

Risk remediation

Tools

OSS scanning tools

Security scanners

Job description

TransUnion's Job Applicant Privacy Notice Team Overview CIBIL Information Security > Security Operations and Engineering

This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.

Role Overview And Core Responsibilities

Key responsibilities include:

• Onboarding servers and applications to enterprise vulnerability scanning platforms.
• Executing and managing SAST, DAST, and IAST security assessments.
• Conducting secure code reviews and validating remediation of identified vulnerabilities.
• Supporting DevSecOps integration within CI/CD pipelines to enable automated security controls.
• Tracking, reporting, and driving closure of application and infrastructure security findings.
• Working with development, infrastructure, and cloud teams to ensure secure-by-design implementation.
• Supporting regulatory, audit, and compliance requirements through continuous security assurance activities.
• Support MBSS scanning for infrastructure systems including OS, network devices.

Required Knowledge And Experiences

2-3 years of experience in Vulnerability Assessment and Security Scanning of servers and applications.

• Hands-on experience with SAST, DAST, IAST, and Open Source Dependency Scanning tools.
• Knowledge of Secure Software Development Lifecycle (SSDLC) and secure coding principles (OWASP Top 10, CWE, SANS Top 25).
• Experience in security onboarding of applications and servers to enterprise security tools.
• Ability to perform secure code reviews and validate remediation of vulnerabilities.
• Understanding of CI/CD pipelines and integration of security controls within DevSecOps workflows.
• Familiarity with Linux, Windows, Web Applications, APIs, and Cloud environments.
• Experience in vulnerability tracking, reporting, and risk remediation coordination.

TransUnion Overview

At TransUnion, we encourage and are committed to creating a real, positive impact and shared sense of purpose within our Workforce for Good, which empowers our people to grow, innovate and contribute to a better future for our communities and customers. We strive to build an environment where our associates are in the driver’s seat of their professional development— while having access to help along the way. We recognize that success comes when our associates thrive both professionally and personally; that’s why we prioritize work/life flexibility and offer resources for our teams across the globe to collaborate and drive excellence. Be a part of our Workforce for Good – you’ll work with great people, pioneering products and cutting-edge technology.

TransUnion is a global information and insights company with over 12,000 associates operating in more than 30 countries. We make trust possible by ensuring each person is reliably represented in the marketplace. We do this with a Tru™ picture of each person: an actionable view of consumers, stewarded with care. Through our acquisitions and technology investments we have developed innovative solutions that extend beyond our strong foundation in core credit into areas such as marketing, fraud, risk and advanced analytics. As a result, consumers and businesses can transact with confidence and achieve great things. We call this Information for Good® — and it leads to economic opportunity, great experiences and personal empowerment for millions of people around the world.

TransUnion Job Title Analyst, InfoSec Risk Management & Governance