TransUnion's Job Applicant Privacy Notice

What We'll Bring:

At TransUnion, we strive to build an environment where our associates are in the driver’s seat of their professional development, while having access to help along the way. We encourage everyone to pursue passions and take ownership of their careers. With the support of colleagues and mentors, our associates are given the tools needed to get where they want to go. Regardless of job titles, our associates have the opportunity to learn new things and be a leader every day.

Come be a part of our team – you’ll work with great people, pioneering products and cutting-edge technology.

The Director of Red Team will be responsible for leading and managing our Red Team program. The Red Team plays a crucial role in simulating real-world attacks and identifying vulnerabilities in our systems, applications, and infrastructure. As the Director, you will be responsible for planning, coordinating, and executing red team engagements, conducting thorough assessments, and providing actionable recommendations to improve our overall cybersecurity posture.

What You'll Bring:

• Bachelor's or Master's degree in Computer Science, Information Security, related fields or experience equivalent.

• Extensive experience (8+ years) in cybersecurity, with a focus on penetration testing, red teaming, or offensive security.

• Mix of experience with Red Team/penetration testing experience and broad experience with Cyber security, Information Assurance, Information Security, and Information Technology

• Minimum 2 years of experience managing Red Team Analysts in day-to-day operations.

• Understanding and ability to articulate the difference between Red Teaming, Penetration Testing and other forms of security assessments.

• Strong understanding of network protocols, operating systems, and web applications.

• Familiarity with industry-standard frameworks and methodologies (e.g., MITRE ATT&CK, OWASP).

• Must be proficient in developing and presenting - in written and oral format - highly technical information and presentations to non-technical audiences at all levels of the organization.

• Strong analytical and problem-solving abilities.

• Ability to work effectively in a fast-paced, dynamic environment.

Impact You'll Make:

Red Team Program Management:

• Develop and implement the overall strategy, scope, and goals of the Red Team program.

• Establish methodologies, tools, and frameworks for red team engagements.

• Coordinate with stakeholders to identify critical assets and systems for testing.

• Stay up-to-date with emerging threats, attack techniques, and industry best practices.

• Conduct regular assessments to measure the effectiveness and efficiency of the Red Team program.

Red Team Engagements:

• Lead and conduct red team engagements to simulate real-world attacks.

• Collaborate with internal teams, including IT, application development, and infrastructure, to define engagement objectives and rules of engagement.

• Collaborate closely with cyber-intelligence to identify and characterize potential cyber-threats to simulate

• Identify vulnerabilities and weaknesses in systems, networks, and applications.

• Perform penetration testing, social engineering, and other advanced attack techniques.

• Document findings, methodologies, and recommendations in detailed reports.

• Coordinate and collaborate with defense teams on Purple Team events to drive better understanding of defensive controls

Team Leadership and Development:

• Recruit, train, mentor, and manage a team of skilled red team professionals.

• Foster a collaborative and innovative work environment.

• Provide guidance and support to team members during engagements.

• Promote professional development and knowledge sharing within the team.

• Stakeholder Communication:

• Communicate effectively with executive management, IT teams, and other stakeholders.

• Present findings, recommendations, and risk assessments to key stakeholders.

• Collaborate with other cybersecurity teams to ensure a comprehensive security posture.

• Participate in incident response activities as needed.

#LI-KJ1

Benefits:

TransUnion provides flexible benefits including flexible time off for exempt associates, paid time off for non-exempt associates, tuition reimbursement, additional (following any short-term disability) 10 weeks of parental leave with gradual return, adoption assistance, fertility coverage, spousal and domestic partner benefits, charity gift matching, employee stock purchase plan, retirement contributions with employer match, organizational growth potential through our online learning platform with guided career tracks, and access to TransUnion’s Employee Resource Groups.

We are committed to being a place where diversity is not only present, it is embraced. As an equal opportunity employer, all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability status, veteran status, genetic information, marital status, citizenship status, sexual orientation, gender identity or any other characteristic protected by law.

TransUnion's Internal Job Title:

Director, Cybersecurity