Red Team Operator

TransUnion•Chicago, IL

1d•Remote

About The Position

TransUnion is seeking an experienced Red Teamer to join its Information Security Department. Reporting to a Director of Cybersecurity, this role conducts threat emulation exercises—including red team operations, purple team operations, and penetration tests—to assess the security of systems, networks, applications, and cloud environments. The position is remote and may require occasional in-person attendance at work-related events at management’s discretion. The Red Teamer simulates real-world cyberattacks, identifies vulnerabilities and gaps in defensive measures, and evaluates internal network segmentation and access controls. The role also develops custom scripts, tools, and frameworks, performs reconnaissance, and communicates findings, risks, and actionable recommendations to technical and non-technical stakeholders. TransUnion offers benefits including health and protection coverage, family support, retirement and stock-purchase plans, time off, professional development resources, and wellness programs. Regular full-time non-sales positions may be eligible for the annual bonus plan; certain positions may also qualify for long-term incentives and other payments. The U.S. base salary range is $112,500 to $187,500 annually, with actual compensation depending on factors including education, training, experience, skills, location, and job responsibilities.

Requirements

At least 5 years of active experience conducting penetration tests and working as a red teamer.
A proven track record performing red team and purple team operations.
Proficiency in compromising modern organizations, escalating privileges, moving laterally through complex networks, and achieving adversary goals.
Strong experience and expertise in phishing techniques, social engineering tactics, and other initial access methods.
Extensive experience writing comprehensive, well-structured reports that detail findings, risks, and actionable recommendations.
Basic development experience, such as Python, Bash, or Git.

Nice To Haves

Industry certifications such as OSCP, OSCE, GPEN, GWAPT, CISSP, or equivalent.

Responsibilities

Conduct comprehensive threat emulation exercises by simulating cyberattacks against systems, networks, and applications.
Collaborate with cross-functional teams on purple team exercises to challenge the organization’s security posture.
Perform lateral movement within target environments to assess internal network segmentation and access controls.
Apply local privilege escalation techniques.
Emulate threat actors’ techniques, tactics, and procedures to identify vulnerabilities and defensive gaps.
Develop and use custom scripts, tools, and frameworks to enhance red team operations and mimic real-world attacks.
Conduct reconnaissance to gather intelligence on potential targets and identify attack vectors.
Test cloud-based environments for weaknesses in configurations, access controls, and data protection mechanisms.
Document and communicate findings, risks, and recommendations in clear reports for technical and non-technical stakeholders.
Adhere to company policies, exercise sound judgment and trustworthiness, work safely, communicate respectfully, and safeguard business operations, confidential and proprietary information, and the company’s reputation.

Benefits

Day-one eligibility for medical, dental, and vision coverage, plus supplemental plan options.
Spousal, domestic partner, and eligible dependent coverage on select plans.
Tax-advantaged HSA and FSA accounts.
Company-paid basic life and AD&D coverage, optional voluntary life and AD&D coverage, and short- and long-term disability.
Optional legal plan, pet insurance, and travel accident coverage.
Adoption assistance, fertility planning coverage, caregiver support, Dependent Care FSA with possibility of an employer match, and complimentary Care@Work membership.
Up to 12 weeks of paid parental leave with eligibility for a gradual return.
401(k) with employer match and Employee Stock Purchase Plan (ESPP).
Financial wellness resources and career coaching.
Optional long-term care insurance.
Tuition reimbursement.
Flexible time off for exempt employees or paid time off for nonexempt employees.
Up to 12 paid holidays per year.
Commuter benefits and employee discounts.
Charitable gift matching and paid volunteer time off, including corporate volunteer events.
24/7 support, including professional therapy, coaching, emotional well-being programs, guided meditation, and resources supporting physical, mental, social, and financial wellness.
Potential eligibility for an annual bonus plan for regular full-time non-sales positions; certain positions may also qualify for long-term incentives and other payments.