Lead Security Engineer - Threat Management Platforms & Integrations(Remote Or Hybrid)

Target is hiring a Lead Security Engineer for its Threat Management Engineering function. The role leads the design and operation of Threat Management platforms, integrations, data capabilities, and detection-lifecycle systems, while improving reliability, measurement, and engineering practices.

Responsibilities:

• Set technical direction and lead the design of complex, multi-component Threat Management systems translating ambiguous operational needs into durable architectures and executable plans while anticipating dependencies and improving cross-platform interoperability
• Design, build, and evolve consumable Threat Management products and derived data capabilities across APIs, integrations, workflow orchestration, curated datasets, historical models, services, and user-facing applications, selecting the interaction model best suited to the problem
• Lead engineering of detection-lifecycle capabilities that simplify rule authorship, validation, deployment, state verification, synchronization, and exception handling across multiple detection platforms
• Build trustworthy measurement and observability foundations with clear definitions, assumptions, and lineage, enabling Threat Management to understand efficacy and performance, identify systemic friction, and drive evidence-based improvements in reliability, scalability, and engineering efficiency
• Partner closely with Threat Management leadership and practitioners across the Threat Management function to frame problems, reconcile competing requirements, and determine the appropriate engineering response
• Take durable ownership of products and platforms when TME is the appropriate long-term engineering home, including reliability, security, performance, maintainability, observability, support, technical lifecycle, and production incident response; drive durable corrective actions and improvements to resilience and support practices
• Develop deep, authoritative understanding of critical data feeds and how they are used across Threat Management, then drive cross-platform, cross-team, and cross-pyramid efforts to reduce noise, improve signal quality, and increase confidence in detection outcomes
• Define and own testing, quality-gate, release, rollback, and change-management strategies that enable safe, repeatable delivery across interconnected systems
• Elevate engineering quality across teams through technical and design reviews, critical problem-solving, code review, pair programming, mentoring, and coaching-oriented feedback, helping engineers reason strategically about product, business, operational, security, and partner tradeoffs
• Communicate technical direction, tradeoffs, and risk clearly to engineering partners, Threat Management leadership, Directors, and Sr. Directors, tying technology decisions to measurable outcomes
• Model and influence safe, effective use of AI in engineering and Threat Management workflows, establishing appropriate guardrails for where automation is useful and where human judgment remains necessary

Requirements:

• 8+ years of software engineering experience building and operating production systems, including ownership of complex problem spaces with a high degree of independence
• Strong backend and platform engineering experience building APIs, services, integrations, workflow orchestration, and data-intensive applications
• Meaningful frontend engineering experience building modern, intuitive user-facing applications and workflows, with the ability to work effectively across the full stack when the solution requires it
• Experience building data pipelines, curated datasets, analytical or historical data models, and reusable data capabilities that support trustworthy metrics, analysis, and decision-making
• Experience designing and integrating multi-component systems across APIs, event-driven workflows, data stores, and enterprise or third-party platforms
• Experience with Git-based development workflows, CI/CD, automated validation and testing, and safe production release practices
• Experience working in public or private cloud environments; experience with Google Cloud, particularly BigQuery, or comparable analytical data platforms is required
• Practical cybersecurity engineering or operations experience sufficient to reason effectively about detection content, telemetry, adversary behavior, threat coverage, and defensive-system tradeoffs
• Demonstrated ability to rapidly develop deep expertise in unfamiliar systems, data feeds, and emerging threats, then translate that understanding into useful engineering, analytical, or detection outcomes
• Ability to investigate telemetry and threat behaviors, understand the semantics and limitations of the underlying data, and develop nuanced pivots, correlations, and approaches to improving detection coverage and signal quality
• Demonstrated ability to define technical designs and evolve architecture from concept through production operation, including security, observability, scalability, resilience, and supportability
• Demonstrated ability to resolve ambiguous requirements involving multiple teams or systems, make sound technical tradeoffs, and communicate decisions clearly to technical and non-technical stakeholders
• Experience leading design and code reviews, mentoring engineers, and raising engineering standards across team boundaries
• Sound judgment in applying AI-assisted engineering and analytical techniques, including understanding where automation improves outcomes and where human judgment remains necessary