Product Security Advisor

TransUnion; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

TransUnion’s Global Technology team engineers secure, reliable, and market-ready products that deliver exceptional experiences to customers, consumers, and colleagues. This remote role sits in the Product Security team and collaborates with Product Engineering to embed security throughout the development lifecycle and across business units.

You will lead secure coding practices, conduct threat modeling, and drive SSDLC with cross-functional teams, while coordinating with audit and compliance to

Qualifications

• 5+ years in cybersecurity, product security or security architecture.
• 3+ years information security in a hybrid cloud environment.
• Experience in secure coding, threat modeling, and SSDLC/CICD.
• Background in software development or engineering.
• In-depth experience identifying and remediating application security vulns in cloud/web apps.
• Ability to present to senior tech and info sec executives.
• Familiar with OWASP, CIS, NIST, PCI-DSS.
• BA/BS in CS or related field.
• CISSP/SSCP/CSSLP certifications preferred.
• Willingness to travel up to 15% domestically.

Responsibilities

• Advises and contributes to product teams on secure coding practices.
• Assists with adoption of SAST, SCA, IAST, CNAPP and remediation results.
• Ensures products comply with security standards and regulations.
• Conducts Threat Modeling using frameworks like STRIDE/PASTA/MAESTRO.
• Partners with architecture teams to embed secure-by-design principles.
• Builds relationships with leadership to raise security awareness.
• Collaborates with audit/compliance to ensure controls are documented and audit-ready.
• Provides updates, education, and presentations on product security.
• Stays current with emerging threats and industry trends.
• Mentors colleagues on secure coding practices.

Skills

Secure Coding

Threat Modeling

SSDLC

Security Architecture

Vulnerability Mgmt

Cloud Security

Executive Communication

Education

BA/BS in CS

Tools

SAST

SCA

IAST

CNAPP

Job description

TransUnion’s Global Technology team engineers secure, reliable, and market-ready products that deliver exceptional experiences to customers, consumers, and colleagues. As part of theProduct Security team, this role bridges product engineering and cybersecurity, ensuring security is embedded throughout the development lifecycle and across business unit operations.This is a remote position which may require occasional in-person attendance at work-related events at the discretion of management.

Role Overview And Core Responsibilities

How you will contribute:

The Product Security Advisor is responsible for ensuring Product Engineering maintains full lifecycle product security through adherence to secure-by-design principles and compliance with policy, regulations, and industry best practices. This person works with Information Security management to create and implement a program for championing strong security practices across products within the TransUnion portfolio, including:

Advises and contributes to product development teams on secure coding practices, vulnerability management, and secure software development lifecycle (SSDLC) processes

Assists Product Engineering teams with adoption of application security tooling (SAST, SCA, IAST, CNAPP) and analysis of its results to ensure vulnerabilities are addressed on a timely basis and prevented from deployment into production

Works with engineering and development teams to ensure products comply with relevant security standards, regulations, and industry certifications, such as OWASP, CIS, or PCI-DSS to ensure security is prioritized throughout the development lifecycle

Conducts Threat Modeling of products using standard frameworks (STRIDE, PASTA, MAESTRO) within the organization to identify potential control gaps and application weaknesses

Partner with architecture teams to embed secure-by-design principles into product development; lead security design reviews and maintain secure application architecture guidelines aligned with best practices and industry standards.

Builds relationships and partners with functional areas and leadership across the business and Global Technology to raise awareness and support for Product Security

Collaborate with audit and compliance teams to ensure product security controls are documented, traceable, and audit-ready. Ensure evidence quality and oversee stakeholder response to findings for regulatory and customer audits (e.g., CIS, SOC 2, PCI-DSS, FedRAMP).

Provides periodic updates, education and presentations to staff and management on various aspects of product security

Stays up to date with emerging threats, technologies, and industry trends to proactively identify and address potential risks to the organization's products

Mentors and educates colleagues and stakeholders on secure coding practices and secure product architecture patterns

Required Knowledge And Experiences

What you will bring:

The duties and responsibilities described above are essential functions of the job. The qualifications below represent the knowledge, skills, and/or abilities of the ideal candidate for a Product Security Advisor and include:

• 5+ years of experience in cybersecurity, product security, or security architecture in a technology-related industry
• 3+ years of information security experience in a hybrid cloud environment
• In depth experience secure coding practices, threat modeling, secure architecture design, and secure SDLC/CICD pipelines
• Prior experience in software development or engineering
• In-depth technical experience identifying and advising on the remediation of application security vulnerabilities on cloud and web-based applications
• Demonstrated ability as a proactive action-oriented problem solver in complex technology and organizational environments
• Experience in presenting to senior technology and information security executives and in influencing stakeholders to achieve strategic objectives
• Experience in working with industry frameworks and standards such as OWASP, PCI, CIS, and NIST
• A BA/BS degree in a computer science or technology related field
• Information Security certifications including CISSP, SSCP, CSSLP are preferred
• Ability to travel domestically up to 15% of time

TransUnion Overview:

At TransUnion, we encourage and are committed to creating a real, positive impact and shared sense of purpose within our Workforce for Good , which empowers our people to grow, innovate and contribute to a better future for our communities and customers. We strive to build an environment where our associates are in the driver’s seat of their professional development— while having access to help along the way. We recognize that success comes when our associates thrive both professionally and personally; that’s why we prioritize work/life flexibility and offer resources for our teams across the globe to collaborate and drive excellence.

Be a part of our Workforce for Good – you’ll work with great people, pioneering products and cutting-edge technology.

TransUnion Job Title

Advisor, InfoSec Risk Management & Governance

TransUnion is a global information and insights company that enables trust in the economy by providing actionable data for businesses and consumers to transact confidently.

IT Services and IT Consulting Technology, Information and Internet Technology, Information and Media

Company TransUnion