Team Overview
Security Forward Deployed Engineering (SFDE) deploys concentrated engineering effort directly into the highest-priority problem spaces across Cyber Defense. The team works embedded across security and engineering, bringing product context into delivery and closing the gap between security intent and engineering reality. SFDE works across Vulnerability Management, AI Governance, Risk and Compliance, and Risk Intelligence to solve complex problems that require new technical approaches. The Sr. Principal Engineer, Security AI Tooling and Automation reports to the SVP, Cyber Defense and serves as a founding senior engineer in the AI Vulnerability Research and Engineering pod.
This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.
Role Overview and Core Responsibilities
•Build and maintain the agentic automation framework, engineering the orchestration layer for tool invocation, state management, retry logic, observability, and failure handling across end-to-end security workflows.
•Own internal security tooling development, including vulnerability intelligence interfaces, remediation-tracking integrations, and operator-facing dashboards used by SFDE and partner security engineering teams.
•Integrate disparate security data sources by building and operating API integrations, data connectors, and normalization pipelines that create a coherent, queryable data model.
•Automate remediation initiation and tracking by triggering fix workflows, monitoring remediation state, escalating breached SLAs, and closing the loop from finding to validated resolution with minimal manual handoff.
•Embed security automation into CI/CD pipelines in partnership with Platform Engineering and DevOps, including automated fix-proposal workflows and pre-production security gates.
•Ensure production reliability of the tooling stack by owning observability, alerting, failure handling, and operational health with the engineering rigor expected of a production service.
•Operate as a practitioner-leader by setting technical direction for the automation layer, mentoring engineers, contributing to cross-pod architecture decisions, and representing tooling and platform capability with senior security and engineering stakeholders.
•Work embedded with engineering teams, sharing context early, co-owning outcomes, and building trust through delivery, technical depth, and shared accountability.
Required Knowledge and Experiences
•At least 8 years of hands-on experience in security engineering, platform engineering, or software engineering, including a strong security engineering component.
•Strong background in API integration, data-pipeline engineering, and building internal developer or operator tooling at production scale.
•Working knowledge of security engineering fundamentals, including vulnerability classes, exploit mechanics, and remediation patterns, sufficient to design automation that handles findings correctly.
•Strong systems thinking with the ability to design reliable, observable, and maintainable automation systems, set technical direction, make build-versus-integrate trade-offs, and deliver in a fast-moving embedded team environment.
•Bachelor's degree in Computer Science, Engineering, or equivalent practical experience.
Required Technical Skills
•Production experience building agentic AI systems or LLM-powered automation frameworks in Python or Go, including tool use, orchestration, and multi-step agentic workflow design.
•Experience engineering CI/CD pipelines and implementing automated security enforcement gates in software delivery workflows.
•Experience designing and operating production integrations, data connectors, normalization pipelines, observability, alerting, state management, retry logic, and failure handling for automation platforms.
•Ability to build and maintain internal security tooling, dashboards, remediation-tracking integrations, and automation systems used by security practitioners and engineering teams.
Preferred Skills
•Experience building security tooling or vulnerability-intelligence platforms, including internal tools, dashboards, or automation systems used by security practitioners.
•Familiarity with agentic AI frameworks and the engineering challenges of operating LLM-powered workflows reliably in production.
•Experience with container and image hardening, infrastructure as code (IaC), or runtime security instrumentation.
•Background in open-source security tooling, security-research automation, or exploit-validation tooling.
•Experience in financial services.
Benefits
•Day-one eligibility for medical, dental, and vision coverage, plus supplemental plan options. Spousal, domestic partner, and other eligible dependent coverage available on select plans. Tax-advantaged HSA and FSA accounts.
•Company-paid basic life and AD&D, optional voluntary life and AD&D for employee and family, short- and long-term disability. Optional legal plan, pet insurance, and travel accident coverage.
•Adoption assistance and fertility planning coverage, caregiver support, Dependent Care FSA with possibility of employer match, complimentary Care@Work membership, and up to 12 weeks of paid parental leave with eligibility for a thoughtful, gradual return.
•401(k) with employer match and Employee Stock Purchase Plan (ESPP), financial wellness resources, career coaching, and optional long-term care insurance.
•Tuition reimbursement, flexible time off for exempt employees or paid time off for nonexempt employees, up to 12 paid holidays per year, commuter benefits, employee discounts, charitable gift matching, and paid volunteer time off, plus corporate volunteer events.
•24/7 access to professional therapy, coaching, and emotional well-being programs alongside guided meditation and resources supporting physical, mental, social, and financial wellness.
Pay Scale Information
The U.S. base salary range for this position is $168,750.00 - $281,250 annually. The salary range reflects a reasonable estimate of compensation for this job; actual compensation is based on additional factors such as an individual's education, training, work experience, job-related skill set, location, and industry knowledge, as well as the scope and responsibilities of the position and market considerations. Regular, full-time non-sales positions may be eligible to participate in TransUnion's annual bonus plan. Certain positions may also be eligible for long-term incentives and other payments based on applicable company guidance and plan documents.
TransUnion's Internal Job Title: Principal, Cybersecurity
