Lead Engineer, Cyber Defense Automation

TransUnion · Bengaluru

  • Experience5–6 yrs
  • SalaryNot disclosed
  • Work modehybrid
  • Levelsenior
  • Posted21 Sept 2026
Apply for this job

About TransUnion

TransUnion is hiring in Bengaluru in financial services. This role looks for around 5+ years of experience.

Skills

  • security automation
  • Python
  • REST APIs
  • JSON
  • webhooks
  • OAuth
  • SOAR platforms
  • LLM platforms
  • Git
  • automated testing
  • CI/CD
  • SOC operations
  • incident response
  • MITRE ATT&CK

The role

A security engineer at a financial technology company designs security automation, builds agentic AI workflows, and integrates SOAR platforms with SOC operations. The role develops Python services and REST APIs while applying incident response practices and MITRE ATT&CK.

Full job description

TransUnion's Job Applicant Privacy Notice

Team Overview

At TransUnion, we have a welcoming and energetic environment that encourages collaboration and

innovation. We’re consistently exploring new technologies and tools. This environment gives our

people the opportunity to hone current skills and build new capabilities, while discovering their

genius. This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.

Role Overview And Core Responsibilities

What You'll Do:

Design, build, and maintain security response automations on our agentic AI SOC platform, and help lead the migration of existing Splunk SOAR playbooksBuild agentic workflows end to end: prompt and agent design, tool integration,guardrails, output evaluation, and human-in-the-loop review for AI-driven triage and responseDevelop and maintain integrations across the security stack (SIEM, EDR, threat intelligence, case management, ITSM) using REST APIs, webhooks, and event-driven patternsBuild internal tools, services, and APIs, primarily in Python, that extend platform capability and reduce analyst toilAdminister and improve the case management platform and its workflowsPartner with detection engineering to operationalize new detections into automated responseContribute to shared engineering standards: Git-based workflows, code review, testing, and CI/CDMeasure what you build: automation throughput, MTTR, false-positive burden, and analyst time savedWrite clear documentation and runbooks; collaborate effectively across a global, distributed team

Required Knowledge And Experiences

What You'll Bring:

5+ years in security engineering, security automation, or software engineering with a strong security focusStrong Python in production settings, with solid command of RESTAPIs, JSON, webhooks, and authentication patterns (OAuth, API keys, secrets handling)Hands-on experience with SOAR or security automation platforms(Splunk SOAR, XSOAR, Tines, Torq, or similar)Experience building with modern LLM platforms (Anthropic Claude,OpenAI, Amazon Bedrock, or similar): using APIs, SDKs, and tool-use patterns to build tools, integrations, and agents, with practical prompt and agent design and evaluation of model output for reliability and safetySoftware engineering fundamentals: Git, code review, automated testing, CI/CDWorking knowledge of SOC operations and incident response workflows; familiarity with MITRE ATT&CKStrong documentation habits and written communication; effective in a distributed global team

We'd Love To See

Experience with agentic AI security platforms, or building autonomousor semi-autonomous agent systems in productionFine-tuning, systematic evaluation (evals), or red-teaming of LLMsComfort using AI-assisted development tools (Claude Code, Cursor,Copilot) as part of a disciplined engineering workflowSplunk Enterprise Security exposure (SPL, detection logic) or detec‐tion-as-code experienceCase management or ITSM platform experience (ServiceNow orsimilar)Web service development (FastAPI, Flask, or similar); front-end expo‐sure a plusAWS, Docker/Kubernetes, Terraform; DevOps backgroundExperience mentoring engineers or leading technical workstreams

TransUnion Overview

At TransUnion, we encourage and are committed to creating a real, positive impact and shared sense of purpose within our Workforce for Good, which empowers our people to grow, innovate and contribute to a better future for our communities and customers. We strive to build an environment where our associates are in the driver’s seat of their professional development— while having access to help along the way. We recognize that success comes when our associates thrive both professionally and personally; that’s why we prioritize work/life flexibility and offer resources for our teams across the globe to collaborate and drive excellence.

Be a part of our Workforce for Good – you’ll work with great people, pioneering products and cutting-edge technology.

TransUnion Job Title

Lead Engineer, Cybersecurity