Lead Engineer - Incident Response Engineering

Target•Brooklyn Park, MN

1d•Hybrid

About The Position

JOIN TARGET CYBERSECURITY AS A LEAD ENGINEER – INCIDENT RESPONSE ENGINEERING As a Lead Engineer, you serve as the technical anchor for the engineering team that supports the product. You help set the direction for application architecture and influence implementation across the team. You can distill abstract architecture into concrete design and guide others in building robust and scalable systems. You demonstrate deep expertise in applying software engineering patterns to solve complex technical problems. You are an expert programmer who applies your skills in developing the product while also influencing fellow engineers through software design proposals, implementation feedback, and technical coaching. You show strong problem-solving skills, help the team triage operational issues, and use your expertise to eliminate repeat occurrences. We are looking for a highly skilled and self-motivated Lead Engineer to support the Incident Response Engineering team, with an initial focus on an internally developed user and entity behavior analytics capability used for insider risk detection and user risk assessment. You will help mature and expand the tooling that enables security teams to identify risky behavior, investigate users, and respond more effectively using behavioral signals, scoring, and workflow-driven analysis. You will work closely with end users to create innovative solutions that bridge the gap between security operations needs and practical engineering outcomes, while also serving as a key engineering leader across broader Incident Response Engineering tools and platforms, including SOAR and artifact collection. Core responsibilities of this job are described within this job description.

Requirements

4 year degree or equivalent experience
5+ years of software development experience with at least one full cycle implementation from requirement to production
Strong problem solving and thought partnership skills
Demonstrated sense of ownership and the ability to work with a limited set of requirements
Expertise in frontend and backend development
Expertise in JavaScript or TypeScript, React, and Python
Experience designing and integrating REST APIs and web-based services
Experience building internal applications, workflow systems, or analyst-facing tools
Strong communication and collaboration skills
Ability to navigate ambiguity and contribute across multiple Incident Response Engineering tools and platforms

Nice To Haves

Experience with SOAR platforms or security automation tools preferred
Experience with UEBA, insider risk, behavioral analytics, or detection engineering preferred
Familiarity with PostgreSQL or similar relational databases preferred
Familiarity with identity and access patterns, including RBAC and Active Directory / LDAP integrations, preferred
Familiarity with data pipelines or data-processing workflows is a strong plus

Responsibilities

Use your technology acumen to apply and maintain knowledge of current and emerging technologies within specialized areas of the technology domain
Design, build, and enhance internal applications, services, and workflows that support insider risk detection, user risk assessment, and incident response operations
Help mature and become the subject matter expert for an internally developed UEBA capability, including detection workflows, enrichment, scoring, and analyst-facing investigation experiences
Contribute across the broader Incident Response Engineering portfolio, including SOAR, artifact collection, and related internal platforms
Evaluate new technologies and participate in decision-making, accounting for factors such as viability within Target’s technical environment, maintainability, and cost of ownership
Lead design, code review, testing, debugging, and implementation activities at the application level
Partner with engineers, analysts, and cross-functional teams to translate operational needs into scalable technical solutions
Support data pipeline and workflow capabilities that improve data visibility, operational effectiveness, and coverage for current tooling gaps
Provide technical guidance to other engineers and help resolve complex operational and engineering issues through durable solutions