Red Team Operator

TransUnion•Chicago, IL

16h•Remote

About The Position

TransUnion's Job Applicant Privacy Notice Personal Information We Collect Your Privacy Choices Team Overview At TransUnion, this role will report to a Director of Cybersecurity. We are seeking an experienced and highly skilled Red Teamer to join our Information Security Department. The Red Teamer will primarily be responsible for conducting in-depth Threat Emulation exercises such as Red Team Operations, Purple Team Operations, and Penetration Tests to assess the security of our systems, networks, and applications. This is a remote position which may require occasional in-person attendance at work-related events at the discretion of management.

Requirements

5+ years of active experience in conducting penetration tests and actively working as a red teamer; proven track record in performing red team operations and purple team operations.
Proficiency in ability to compromise a modern organization, escalate privileges, move laterally through complex networks, and achieve adversary goals.
Strong experience and expertise in phishing techniques, social engineering tactics, and other initial access methods.
Extensive experience in writing comprehensive and well-structured reports detailing findings, risks, and actionable recommendations.
Basic development experience (python/bash/git/etc) to create custom solutions for bleeding edge problems.

Nice To Haves

Industry certifications such as OSCP, OSCE, GPEN, GWAPT, CISSP, or equivalent would be an advantage.

Responsibilities

Conduct comprehensive threat emulation exercises, actively simulating cyber-attacks to uncover vulnerabilities in systems, networks, and applications.
Collaborate with cross-functional teams to perform purple team exercises that challenge the organization’s overall security posture.
Perform lateral movement within target environments to assess the effectiveness of internal network segmentation and access controls.
Demonstrate expertise in local privilege escalation techniques.
Emulate threat actors by replicating their techniques, tactics, and procedures to identify vulnerabilities and gaps in our defensive measures.
Develop and utilize custom scripts, tools, and frameworks to enhance red team operations and mimic real-world attacks.
Conduct reconnaissance activities to gather intelligence on potential targets and identify attack vectors.
Test the security of cloud-based environments and identify weaknesses in configurations, access controls, and data protection mechanisms.
Document and communicate findings, risks, and recommendations in clear and concise reports to stakeholders, including technical and non-technical audiences.

Benefits

day-one eligibility for medical, dental, and vision coverage, plus supplemental plan options.
Spousal, domestic partner, and other eligible dependent coverage is available on select plans.
Tax‑advantaged HSA and FSA accounts
company‑paid basic life and AD&D
optional voluntary life and AD&D for you and your family
short‑ and long‑term disability.
legal plan
pet insurance
travel accident coverage.
adoption assistance
fertility planning coverage
caregiver support
Dependent Care FSA for possibility of an employer match
complimentary Care@Work membership
up to 12 weeks of paid parental leave with eligibility for a thoughtful, gradual return.
401(k) with employer match
Employee Stock Purchase Plan (ESPP).
financial wellness resources
career coaching
optional long‑term care insurance
tuition reimbursement
flexible time off for exempt employees or paid time off for nonexempt employees
up to 12 paid holidays per year
commuter benefits
employee discounts
charitable gift matching
paid volunteer time off
corporate volunteer events
24/7 support including professional therapy, coaching, and emotional well‑being programs
guided meditation and resources that support physical, mental, social, and financial wellness.