Lead Engineer AI Security – Security Architecture

Target • Brooklyn Park, MN

4d • $132,000 - $238,000

About The Position

As a Lead Engineer on Target’s Security Architecture team, you will collaborate with technical and leadership teams across Target Tech to ensure systems are designed and built securely. You will identify security risks, develop mitigation strategies, integrate security functions and controls into system architecture, evaluate proposed architectures, and design secure architectures. The role is highly technical and advisory, supporting the enterprise as new platforms and systems are built and existing ones are modified. Strong interpersonal and communication skills are essential for developing open, cooperative partnerships across the enterprise.

The role also involves conducting full-stack architecture reviews of products and platforms; providing information-security expertise for complex cloud and on-premises systems and applications; designing security reference architectures and implementation/configuration guides; and contributing security controls with an emphasis on cloud technologies. You will assess and communicate risk, negotiate priorities with cross-domain stakeholders, and work with engineering teams on advanced security analysis of complex cloud systems, identifying gaps and helping develop design solutions and security requirements. Duties may change based on business needs.

The role may be performed remotely or in a hybrid arrangement, depending on Target’s needs. Remote team members work full-time from home or another non-Target location and may travel to headquarters up to four times a year. Hybrid team members may work remotely or onsite at a Target location according to role, team, and daily tasks. Work must be performed within the country of the primary work location unless otherwise prescribed by Target.

Requirements

• Four-year degree or equivalent experience.
• Polyglot programmer comfortable working in many languages across different platforms.
• Seven or more years of hands-on technology experience, with extensive cybersecurity knowledge including Information Protection, AI Security, and/or Cloud Security; GCP is strongly preferred.
• Curiosity and ability to learn.
• Expertise in containerization technologies and tools.
• Solid understanding of generative AI and machine learning.
• Understanding of prompt injection styles, including direct, indirect, and RAG poisoning, and familiarity with the OWASP Top 10 for LLMs.
• Understanding of MCP authentication patterns, including dynamic client registration.
• Knowledge of RAG authorization patterns.
• Experience mitigating security risks associated with local coding agents.
• Ability to seek out cross-team collaboration opportunities and stay current on relevant technologies through self-directed learning.
• Excellent written and verbal interpersonal skills, including strong presentation abilities.
• Demonstrated ability to use security tools and technologies across diverse environments, with technical depth to understand and implement end-to-end solutions aligned with reference security architecture requirements.
• Good understanding of security management workflows in large enterprise organizations and complex environments.
• Good understanding of the current threat landscape and challenges facing organizations.
• Knowledge of security frameworks, standards, and best practices, such as NIST and ISO/IEC 27001.
• Strong understanding of network security, cryptography, and secure software development.
• Experience with security technologies such as firewalls, IDS/IPS, SIEM, and DLP.
• Excellent analytical, problem-solving, and communication skills.

Nice To Haves

• GCP-native security product experience, such as VPC Service Controls, Organization constraints, Cloud Armor, or NextGen Firewall.
• Experience with Google SCC or Wiz.
• Vertex AI experience.
• AWS or Azure experience.

Responsibilities

• Collaborate with system designers to integrate security requirements into the design phase of IT systems.
• Develop and maintain security architecture documentation, including security models, frameworks, and diagrams.
• Ensure security architecture aligns with business objectives and regulatory requirements.
• Identify potential vulnerabilities and threats by understanding security risks.
• Develop risk mitigation strategies and recommend appropriate security controls.
• Design and implement security solutions, including firewalls, encryption protocols, and access control mechanisms.
• Collaborate with development and operations teams to support secure creation and deployment of IT systems.
• Provide guidance on secure coding practices.
• Prioritize highly impactful changes that improve the business.
• Conduct full-stack architecture reviews of products and platforms.
• Provide information-security expertise for complex systems and applications in cloud and on-premises environments.
• Design security reference architectures and create implementation and configuration guides.
• Provide expertise on creating and implementing security controls, with an emphasis on cloud technologies.
• Assess and communicate risk accurately while negotiating priorities with cross-domain stakeholders.
• Collaborate with engineering teams on advanced security analysis of complex cloud systems, identify gaps, and contribute to design solutions and security requirements.

Benefits

• Eligible team members and dependents may receive comprehensive health benefits and programs, which may include medical, vision, dental, and life insurance.
• 401(k).
• Employee discount.
• Short-term disability.
• Long-term disability.
• Paid sick leave.
• Paid national holidays.
• Paid vacation.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior