Lead Engineer – Cyber Security Full Stack Engineer

Target • Brooklyn Park, MN

12d • $132,000 - $238,000 • Hybrid

About The Position

The Lead Engineer – Cyber Security Full Stack Engineer role is a key position within Target's technology team, focusing on designing, maintaining, and evolving the SIEM platform. This role involves working with both legacy and new integrations, building full-stack features, and collaborating with various security teams to translate workflows into technical designs. The engineer will take ownership of production readiness, operational health, and software releases, providing technical leadership and contributing to the continuous improvement of the SIEM services. This position operates on a Hybrid/Flex for Your Day work arrangement, requiring presence both onsite at the Target HQ MN location and virtually, depending on the needs of the role, team, and tasks. Work duties are restricted to the country of the primary work location.

Requirements

• 8+ years of experience building full stack applications.
• 2+ years building backend services with Node, Express, and an ORM (e.g. Sequelize).
• 2+ years working with a job scheduler or orchestration framework (e.g. Bull or Temporal).
• 2+ years of experience with relational databases (e.g., MySQL, PostgreSQL).
• 2+ years building React or Next.js applications with TypeScript, state management (e.g. TanStack Query), form validation (React Form Hooks), and component libraries (e.g. MUI).
• 2+ years of experience with a message framework (e.g. Kaffka and ActiveMQ) and distributed caching (e.g. Redis).
• Demonstrated ability to define technical designs and evolve system architecture from concept to production.
• Worked on public or private cloud environments.
• Worked in large codebases with multiple repositories.
• Familiarity with containerization and using CI/CD pipelines to generate artifacts (e.g. Docker, Docker Swarm, Kubernetes).
• Experience with application observability using APM tools and OpenTelemetry.
• Experience on call support.

Responsibilities

• Design, maintain, and evolve the SIEM platform across the legacy Next.js/Node.js application stack and new Google SecOps integrations, making pragmatic architecture decisions that improve reliability, maintainability, and migration velocity.
• Build full stack features in Typescript, React, Express, Temporal, and Bull.
• Partner with Threat Detection & Operations, Cyber Threat Intelligence, CSIRT, and other security teams to translate detection and investigation workflows into technical designs, resolve ambiguous or conflicting requirements, and deliver new or migrated capabilities on Google SecOps.
• Contribute independently with minimal supervision. Take ownership from problem to delivery.
• Create technical designs for new features. Decompose the design into epics and user stories.
• Review and manual test code from other team members.
• Own production readiness and operational health for SIEM services, including hosted environments, service users, virtual machines, containers, SSL certificates, databases, PCI compliance, observability, on-call support, and release quality; troubleshoot issues across the stack and drive durable fixes.
• Own testing from start to finish with automated and manual tests.
• Participate level 1 on call rotation.
• Provide technical leadership for engineers contributing to the SIEM platform through design reviews, code reviews, pair programming, and collaborative problem solving.
• Use observability metrics, logs, traces, and user feedback to improve performance, usability, and reliability.
• Manage software releases from start to finish.

Benefits

• Comprehensive health benefits and programs, which may include medical, vision, dental, life insurance and more
• 401(k)
• Employee discount
• Short term disability
• Long term disability
• Paid sick leave
• Paid national holidays
• Paid vacation

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed