Principal Security Engineer – Business Information Security Office (BISO)

Target • Brooklyn Park, MN

4d • $168,000 - $303,000 • Hybrid

About The Position

The Principal Security Engineer for Target’s Business Information Security Office (BISO) takes ownership of designing, building, and scaling security solutions to secure Target technologies. The role works across technology and business teams to define security requirements, assess risk, and develop mitigation strategies. It uses deep engineering and technical expertise to build security solutions and influence peer and partner teams, while serving as an organizational leader who mentors team members in security concepts and engineering best practices. Job duties may change at any time due to business needs.

The position is based on a Hybrid/Flex for Your Day arrangement at Target’s Minneapolis, Minnesota headquarters, with work performed onsite and virtually according to role, team, and daily tasks. The posting also says the position may be considered for a remote or hybrid arrangement based on Target’s needs. Remote team members work full-time from home or another non-Target location, may travel to headquarters up to four times a year, and do not have a desk at a Target location. Work duties cannot be performed outside the country of the primary work location unless otherwise prescribed by Target.

The posted pay range is $168,000 to $303,000. Pay depends on several factors, which may include labor market, education, work experience, and certifications. Eligible team members and dependents may receive health benefits and programs, including medical, vision, dental, and life insurance. Other benefits for eligible team members include 401(k), employee discount, short- and long-term disability, paid sick leave, paid national holidays, and paid vacation.

Requirements

• Bachelor’s degree in information security, computer science, or a related field, or related experience.
• 10 or more years of engineering experience in one or more information security domains, such as vulnerability management, threat intelligence, application security, incident response, or risk management.
• 5 or more years of experience leading technical and strategic planning and strategy.
• Experience defining security requirements, managing findings, and mitigating risk across dozens of business lines, hundreds of applications, and thousands of stakeholders.

Nice To Haves

• Master’s degree in information security, computer science, or a related field, or related experience.
• 5 or more years of engineering experience in Operational Technology (OT) or Internet-of-Things (IoT) security.
• 5 or more years of engineering experience in network architecture, network design, or network segmentation.
• Experience designing, developing, and scaling security solutions that make developer and technology solutions secure by default, such as auto-patching and credential rotation.
• Demonstrated ability to align business needs with security requirements so threats and risks are identified and managed.
• Executive-level verbal and written communication skills, including explaining technical topics to varied stakeholders to drive understanding and alignment.
• Ability to own enterprise-wide security projects or programs, including creating project plans, identifying stakeholders, communicating progress, and addressing roadblocks.
• Experience with on-premises infrastructure, such as bare-metal servers and firewalls, and cloud infrastructure such as GCP, AWS, or Azure.
• Experience using AI tools, such as Claude or ChatGPT, to measurably improve the effectiveness or operations of a security tool or mechanism.
• Experience with common security tools such as SIEM, DLP, IDS, and IPS.
• Experience with common security frameworks such as NIST, ISO/IEC 27001, and PCI-DSS.
• Relevant security industry certifications, such as CISSP, CISM, or OSCP.

Responsibilities

• Design, build, and scale security solutions to secure Target technologies.
• Work across Target technology and business teams to define security requirements, assess risk, and develop mitigation strategies.
• Build security solutions and influence peer and partner teams to increase security impact.
• Mentor team members in security concepts and engineering best practices.
• Manage security requirements, findings, and risk across business lines, applications, and stakeholders.

Benefits

• Eligible team members and dependents may receive medical, vision, dental, and life insurance and other health benefits and programs.
• 401(k)
• Employee discount
• Short-term disability
• Long-term disability
• Paid sick leave
• Paid national holidays
• Paid vacation

What This Job Offers

• Job Type: Full-time
• Career Level: Principal