Remote Red Team Operator – Threat Emulation Expert

TransUnion LLC; New Jersey; Remote; USD 113,000 - 188,000; Full time

Job summary

TransUnion LLC is seeking a skilled Red Teamer to lead threat emulation exercises and red/purple team operations. The role focuses on assessing the security of systems, networks and cloud environments, with emphasis on lateral movement, privilege escalation and custom tooling.

The ideal candidate has 5+ years in penetration testing/red team roles, strong phishing and social engineering capabilities, and can produce detailed risk-based reports for technical and non-technical stakeholders.

Qualifications

• 5+ years of active penetration testing/red team experience.
• Proven ability to compromise, escalate privileges and move laterally.
• Strong phishing and social engineering skills.
• Experience writing clear, actionable reports with risks and recommendations.
• Basic development experience (Python/Bash/Git) to create custom solutions.

Responsibilities

• Conduct threat emulation exercises, including red team and purple team ops.
• Collaborate with cross-functional teams to assess security posture.
• Perform lateral movement and privilege escalation testing within targets.
• Emulate attacker techniques to identify gaps in defenses.
• Develop scripts/tools to enhance red team operations.
• Conduct reconnaissance to identify attack vectors and targets.
• Test security of cloud environments and data protection controls.
• Document findings and communicate risk in clear reports.

Skills

Red team operations

Threat emulation

Purple team exercises

Phishing techniques

Reporting

Scripting (Python/Bash/Git)

Job description

TransUnion LLC is seeking a skilled Red Teamer to lead threat emulation exercises and red/purple team operations. The role focuses on assessing the security of systems, networks and cloud environments, with emphasis on lateral movement, privilege escalation and custom tooling.

The ideal candidate has 5+ years in penetration testing/red team roles, strong phishing and social engineering capabilities, and can produce detailed risk-based reports for technical and non-technical stakeholders.