Senior Principal Architect, Cyber Defense Engineering

Trans Union's Job Applicant Privacy Notice

Personal Information We Collect

Your Privacy Choices

Team Overview
Cyber Defense Engineering is responsible for modernizing Trans Union's detection, response, vulnerability, and endpoint capabilities through scalable architecture, automation, and integrated security platforms.

This individual contributor role will act as the principal technical architect for Trans Union's Cyber Defense organization, owning the reference architecture that underpins modernization across Data Security Posture Management (DSPM), Zero Trust Network Access (ZTNA), Endpoint Strategy, and AI enablement.

Reporting the SVP, Cyber Defense Engineering, this role will partner closely with the AI SOC, Vuln Ops, Detection Engineering, and Technical Program Manager functions to ensure architectural coherence as Cyber Defense shifts from fragmented, tool-centric operations to a unified, automation-first, agentic security architecture. This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.

Role Overview and Core Responsibilities

• Own and evolve the Cyber Defense reference architecture, defining the target-state design for how detection, response, vulnerability management, and endpoint telemetry integrate across a unified data and automation layer.
• Architect Trans Union's Data Security Posture Management (DSPM) capability, leading technical evaluation, integration design, and rollout planning for cloud-native data discovery, classification, and exposure detection, including Wiz DSPM, across AWS, Google Cloud Platform, and hybrid environments.
• Define Trans Union's Zero Trust Network Access (ZTNA) architecture, establishing target-state design for identity-aware, least-privilege access to enterprise and cloud workloads in coordination with IAM, network security, and cloud infrastructure teams.
• Own Endpoint Strategy architecture, defining the target design for endpoint detection and response, exposure management, and telemetry integration across the enterprise fleet while rationalizing overlapping endpoint tooling.
• Architect the AI enablement layer for Cyber Defense, designing agentic and LLM-based capabilities for triage, investigation, and response, including MCP-based agent orchestration and AI SOC platforms that integrate with existing SIEM, SOAR, and case management systems.
• Lead the technical architecture for SIEM and security data platform modernization, defining the target design for log ingestion, retention, and analytics as the organization evaluates consolidation of fragmented logging and detection platforms.
• Define reference architecture for the Vuln Ops operating model, ensuring vulnerability discovery, prioritization, disruption, and remediation systems integrate cleanly with the broader Cyber Defense data and automation architecture.
• Evaluate emerging security technologies and vendor platforms against Trans Union's architecture principles, producing build-versus-buy recommendations, integration designs, and proof-of-concept plans for new capabilities before they reach production.
• Establish architecture governance and design standards for Cyber Defense Engineering, authoring reference diagrams, integration patterns, and technical design documents that guide engineering teams building against the architecture.

Required Knowledge and Experiences

• 15+ years of experience in cybersecurity architecture, security engineering, or related technical roles, with demonstrated ownership of enterprise-scale security reference architectures.
• Deep technical expertise in cloud security posture and data security tooling, with hands-on experience in DSPM, CNAPP, or related platforms, including Wiz, across AWS, Google Cloud Platform, or Azure environments.
• Strong understanding of Zero Trust Network Access (ZTNA) architecture and identity-aware access models, including experience designing or implementing ZTNA in an enterprise environment.
• Hands-on experience with endpoint detection and response (EDR) architecture and tooling, including Crowd Strike Falcon and Microsoft Defender for…