Senior Director, Vulnerability Resiliency Engineering
Job Location:
Chicago, IL - USA
Yearly Salary:
Posted:
Application Deadline:
Vacancies:
Job Summary
TransUnions Job Applicant Privacy Notice
Personal Information We Collect
Team Overview
The Vulnerability Resiliency Engineering team is responsible for reducing exploitable risk across TransUnions technology environment by transforming traditional vulnerability management into a modern VulnOps operating model.Partnering closely with Security Operations Incident Response Threat Intelligence Product Security Cloud Infrastructure Security and Engineering teams the organization focuses on accelerating vulnerability discovery disruption remediation validation and risk reduction through automation and engineering-led ownership.
Reporting to the SVP of Cyber Defense this leader will drive one of TransUnions most critical cybersecurity transformation initiatives while building a scalable AI-enabled approach to exposure management across first-party code third-party dependencies APIs endpoints and infrastructure This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.
Role Overview and Core Responsibilities
Define and execute TransUnions VulnOps transformation strategy shifting the organization from a traditional scan-and-backlog model to an engineering-led approach focused on eliminating exploitable exposure.
Lead the AI Vuln Research and Engineering Vulnerability Resiliency Engineering and Traditional Vulnerability Management Operations teams overseeing a peak organization of approximately 25 engineers while evolving to a highly automated team of 11 to 14 specialized engineers.
Own the end-to-end vulnerability operating lifecycle including discovery prioritization disruption remediation validation and measurement to ensure clear accountability and durable risk reduction.
Establish and operationalize a patch-plus-disruption response model including controls such as WAF rules API protections network isolation quarantine capabilities runtime protections and virtual patching.
Drive consolidation of legacy vulnerability and exposure management platforms into a unified VulnOps ecosystem centered on Wiz Cogent Security and a common security data lake.
Partner with engineering teams to eliminate vulnerabilities before production through trusted images CI/CD security controls approved libraries and automated remediation capabilities.
Scale automation and AI-driven remediation workflows to improve remediation efficiency and reduce mean time to remediate (MTTR) for critical vulnerabilities.
Define and manage executive-level operational metrics including exploitable exposure disruption effectiveness remediation performance vulnerability elimination rates asset currency and SLA compliance.
Lead cross-functional governance forums that drive accountability exposure reduction engineering alignment technology lifecycle management and automation adoption.
Represent Vulnerability Resiliency Engineering in executive leadership reviews providing strategic updates on risk reduction outcomes transformation progress and operational performance.
Required Knowledge and Experiences
12 years of cybersecurity experience including vulnerability management security operations security engineering or related disciplines with at least 5 years leading managers and multi-team organizations.
Demonstrated success leading large-scale vulnerability management or security transformation initiatives that leverage automation engineering ownership and measurable risk reduction outcomes.
Deep understanding of vulnerability management frameworks exposure management threat-informed prioritization and exploit disruption strategies within complex enterprise environments.
Proven experience driving organizational design workforce transformation talent development and capability building while modernizing operational practices.
Bachelors degree in Computer Science Information Security Engineering or a related field or equivalent combination of education and relevant leadership experience. Advanced degree preferred.
Required Technical Skills
Expertise with vulnerability and exposure management platforms including Wiz CrowdStrike JFrog Xray vulnerability scanners Endpoint Detection and Response (EDR) Security Information and Event Management (SIEM) Cloud-Native Application Protection Platforms (CNAPP) and Security Orchestration Automation and Response (SOAR) technologies.
Strong knowledge of vulnerability prioritization and risk-based remediation methodologies including CISA Known Exploited Vulnerabilities (KEV) Exploit Prediction Scoring System (EPSS) and related frameworks.
Experience designing and implementing automated remediation AI-driven security operations CI/CD security controls trusted image management and engineering-owned vulnerability reduction programs.
Proven capability leading enterprise-scale platform rationalization vendor consolidation and migration initiatives utilizing centralized security data models and reporting platforms.
Strong executive communication and data storytelling skills with the ability to translate technical findings exposure trends and operational metrics into actionable business decisions.
Were also looking for the preferred skills below. Whether you are proficient or could use some brushing up were happy to support your career development and growth in:
Experience building or scaling AI-native or agentic vulnerability remediation capabilities.
Experience with Attack Surface Management (ASM) programs in addition to traditional vulnerability management disciplines.
Familiarity with MITRE ATT&CK and threat-informed defense methodologies.
Experience operating within financial services fintech or other highly regulated enterprise environments.
Experience building or scaling enterprise security data lakes operational reporting platforms or exposure intelligence programs.
Benefits that support every part of your life:
At TransUnion we design benefits to help youfeel well do well and plan wellfrom day one.
For Your Health: Enjoyday-one eligibilityfor medical dental and vision coverage plus supplemental plan options. Spousal domestic partner and other eligible dependent coverage is available on select plans. Choose taxadvantagedHSAandFSAaccounts to make everyday care more affordable.
For Your Protection: Weve got your back withcompanypaid basic life and AD&D optionalvoluntary life and AD&Dfor you and your family andshort and longterm disability. You can also opt into alegal planpet insurance andtravel accident coverage.
For Your Family: Fromadoption assistance and fertility planning coveragetocaregiver support were here for every chapter. AccessDependent Care FSA for possibility of an employer match a andup to 12 weeks of paid parental leavewith eligibility for a thoughtful gradual return.
For Your Future: Build toward whats next with our401(k) with employer matchandEmployee Stock Purchase Plan (ESPP). Tapfinancial wellness resourcescareer coaching and optionallongterm care insuranceto plan confidently.
For You: Grow and recharge withtuition reimbursementflexible time off for exempt employees or paid time off for nonexempt employees up to 12 paid holidays per year commuter benefits employeediscountscharitable gift matching andpaid volunteer time off plus corporate volunteer events that make it easy to give back.
For Your Wellness: Access24/7 supportincluding professionaltherapycoaching and emotional wellbeing programs alongside guided meditation and resources that supportphysical mental social and financial wellness.
We are committed to being a place where diversity is not only present it is embraced. As an equal opportunity employer all qualified applicants will receive consideration for employment without regard to race color religion sex national origin age disability status veteran status genetic information marital status citizenship status sexual orientation gender identity or any other characteristic protected by law. Additionally in accordance with Section 503 of the Rehabilitation Act of 1973 and the Vietnam Era Veterans Readjustment Assistance Act of 1974 TransUnion takes affirmative action to employ and advance in employment qualified individuals with a disability and protected veterans in all levels of employment and develops annual affirmative action plans. Components of TransUnions Affirmative Action Program for individuals with disabilities and protected veterans are available for review to any associate or applicant for employment upon request by contacting .
Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law including the Los Angeles County Fair Chance Ordinance for Employers the San Francisco Fair Chance Ordinance Fair Chance Initiative for Hiring Ordinance and the California Fair Chance Act.
Adherence to Company policies sound judgment and trustworthiness working safely communicating respectfully and safeguarding business operations confidential and proprietary information and the Companys reputation are also essential expectations of this position.
TransUnion Overview:
At TransUnion we encourage and are committed to creating a real positive impact and shared sense of purpose within our Workforce for Good which empowers our people to grow innovate and contribute to a better future for our communities and customers. We strive to build an environment where our associates are in the drivers seat of their professional development while having access to help along the way. We recognize that success comes when our associates thrive both professionally and personally; thats why we prioritize work/life flexibility and offer resources for our teams across the globe to collaborate and drive excellence.
Be a part of our Workforce for Good youll work with great people pioneering products and cutting-edge technology.
TransUnions Internal Job Title:
Sr Director CybersecurityCompany:
TransUnion LLCRequired Experience:
Exec
About Company
Company Overview TransUnion is a leading global risk and information solutions provider. Our mission is to help people worldwide access opportunities that lead to a higher quality of life. We accomplish this by delivering solutions that help organizations optimize their risk-based dec ... View more
