Remote Red Team Operator: Threat Emulation & Pentests

TransUnion; United States; Remote; USD 113,000 - 188,000; Full time

Benefits offered by this job

401(k) with employer match

Employee Stock Purchase Plan (ESPP)

Tuition reimbursement

Paid holidays

Commuter benefits

Job summary

TransUnion is seeking an experienced Red Teamer to join the Information Security Department. You will conduct threat emulation exercises, red team operations, and purple team activities to assess and improve our security posture across systems, networks, and applications.

This remote role may require occasional in-person attendance at events. You will develop custom tools, perform phishing simulations, and document findings with actionable recommendations for technical and non-technical

Qualifications

• 5+ years of active experience conducting penetration tests/red team operations.
• Ability to compromise a modern org, elevate privileges, and move laterally.
• Experience with phishing and social engineering methods.
• Experience writing comprehensive reports with risks and recommendations.
• Basic development skills to create custom solutions.

Responsibilities

• Conduct threat emulation exercises and red team operations to identify vulnerabilities.
• Lead purple team exercises to challenge security posture across teams.
• Perform lateral movement to test network segmentation and access controls.
• Demonstrate local privilege escalation techniques to assess defenses.
• Develop scripts/tools to enhance red team effectiveness and simulate real-world attacks.
• Document findings with clear, actionable recommendations for stakeholders.

Skills

Red Teamer

Penetration Testing

Purple Teaming

Phishing Techniques

Social Engineering

Privilege Escalation

Lateral Movement

Scripting

Tools

Python

Bash

Git

Job description

TransUnion is seeking an experienced Red Teamer to join the Information Security Department. You will conduct threat emulation exercises, red team operations, and purple team activities to assess and improve our security posture across systems, networks, and applications.

This remote role may require occasional in-person attendance at events. You will develop custom tools, perform phishing simulations, and document findings with actionable recommendations for technical and non-technical