Lead Engineer – Operational Technology Security

Target • Brooklyn Park, NC

1d • Hybrid

About The Position

As a Lead Engineer on Target's Operational Technology (OT) Security team, you will operate, integrate, automate, and scale OT security across Target's global supply chain and retail sites. You will own the engineering and day-to-day operation of Target's OT security platform, which supports asset inventory, secure configuration, vulnerability management, event visibility and detection, and other security use cases. You will build automation to route findings to operational teams so they can resolve security issues safely and in priority order. The role partners with security and engineering teams to implement controls in environments where availability, safety, and product movement are important.

The position calls for a builder's mindset, a strong bias for action, and the technical depth to turn OT security control requirements into practical engineering patterns that teams can implement and operators can use. The role also provides OT-specific triage and remediation guidance, contributes to consultations on new or significantly changed OT solutions, manages day-to-day vendor relationships, and mentors engineers across Target's cybersecurity and OT engineering community.

This role is based at Target HQ in Minnesota and operates in a Hybrid/Flex for Your Day arrangement. Work is performed onsite and virtually according to the role, team, and tasks. Work duties must be performed within the country of the primary work location unless otherwise prescribed by Target.

Requirements

• A four-year degree or equivalent work experience.
• At least 6 years of hands-on experience in security engineering, infrastructure, or platform engineering, including significant experience securing OT/ICS environments.
• Hands-on experience engineering and operating an enterprise-scale OT asset visibility and exposure platform, such as Claroty XDome, Nozomi, Dragos, Armis, Tenable OT, or similar, including sensor and collector deployment and health, coverage, data quality, and integrations.
• Strong understanding of OT/ICS fundamentals, including the Purdue Model, IT/OT boundary patterns, PLCs, HMIs, SCADA, industrial switches, Windows/Linux OT servers, and vendor-managed subsystems.
• Working knowledge of industrial protocols such as Modbus, DNP3, OPC-UA, EtherNet/IP, and PROFINET, and an understanding of when passive or active discovery is appropriate.
• Experience with OT asset inventory discovery, reconciliation, classification, and enrichment, and working with authoritative inventory owners to close gaps.
• Experience with OT vulnerability and exposure management, including risk-based prioritization, exception tracking, compensating controls, and closure validation.
• Experience with secure-configuration baselines and hardening for OT servers, HMIs, and industrial endpoints.
• Hands-on familiarity with ISA/IEC 62443 and related frameworks such as NIST CSF and NIST SP 800-82, and the ability to turn control requirements into practical engineering patterns and acceptance criteria.
• Scripting and automation skills in at least one language, such as Python, plus experience with REST APIs and integrating security tools with enterprise systems.
• Experience running production platforms with change management, monitoring, and continuous-improvement practices in environments where availability and safety come first.
• Working knowledge of OT network segmentation, DMZs, jump hosts, and vendor remote access.
• Understanding of the current OT threat landscape, including IT-to-OT pivots, vendor remote access abuse, ransomware impacts on OT-adjacent hosts, and ICS-specific malware, and how these threats should shape prioritization.
• Ability to build trust with operational teams, site teams, and vendors, while treating operator experience as a first-class concern.
• Excellent written and verbal communication skills, including the ability to explain technical OT risk to engineers and non-security leaders.
• Demonstrated curiosity, ownership, and a builder's mindset.

Nice To Haves

• Experience with Kafka, BigQuery, PowerBI, Terraform, CI/CD, or GitHub Actions.

Responsibilities

• Own the engineering, configuration, and day-to-day operation of the OT security platform, including availability, performance, upgrades, licensing, access management, and continuous improvement.
• Expand and maintain sensor and collector coverage and health across OT environments, coordinating configuration and site installation with site and network teams.
• Build OT asset discovery, reconciliation, classification, and enrichment; establish minimum inventory-data expectations and work across teams to improve asset attribution, function, location, criticality, lifecycle, and support metadata.
• Monitor and improve platform data quality, and find and address coverage and inventory gaps so OT asset, vulnerability, traffic-flow, and secure-configuration data can be trusted.
• Ingest, normalize, correlate, and enrich findings and other OT exposure data, and prioritize risk using operational consequence, asset criticality, exploitability, exposure, compensating controls, vendor support, maintenance windows, and remediation feasibility.
• Own OT secure configuration by using configuration data and other evidence to identify security-relevant deviations, develop hardening patterns, prioritize gaps, and validate remediation.
• Develop shared engineering requirements, technical patterns, and acceptance criteria with partner teams for network segmentation and vendor access patterns.
• Provide OT traffic-flow, asset, exposure, and operational-context data to support architecture and operations, and develop methodologies for measuring adherence to prescribed patterns.
• Document and track exceptions and compensating controls for OT systems that cannot be remediated through normal processes; report remaining risk through the appropriate governance process.
• Provide OT-specific triage, remediation guidance, and closure validation to OT Infrastructure, site teams, system owners, and vendors.
• Build and maintain OT security platform integrations and automation, including APIs, connectors, and scripts; work with data-integration engineers to move OT data into enterprise dashboards, ticketing, and remediation workflows with clear ownership and SLAs.
• Contribute security engineering consultations on new or significantly changed OT solutions, including vendor and product evaluations, design reviews, hardening requirements, and vulnerability-management expectations.
• Reduce toil for the team and OT operations partners through automation, self-service, runbooks, and reusable engineering patterns.
• Manage day-to-day OT security vendor relationships, including support cases, capability adoption, roadmap feedback, and input to evaluations and proofs of concept.
• Mentor other engineers and share OT security knowledge across Target's cybersecurity and OT engineering community.

Benefits

• Eligible team members and their dependents may receive comprehensive health benefits and programs, which may include medical, vision, dental, and life insurance.
• 401(k).
• Employee discount.
• Short-term disability.
• Long-term disability.
• Paid sick leave.
• Paid national holidays.
• Paid vacation.
• Financial, education, and well-being benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior