Senior Engineer – Security Visibility Infrastructure

Target • Brooklyn Park, NC

6d • Hybrid

About The Position

As a Senior SIEM Engineer, you will own and improve end-to-end log ingestion into Google SecOps (formerly Chronicle), from source onboarding through reliable shipment, enabling downstream search, alerting, enrichment, and investigations. You will design and deliver scalable improvements to ingestion pipelines, integrations, and data validation, including feed health signals, shipment validations, and other metadata that ensure end-to-end feed reliability.

You will partner with Threat Management Engineering, Threat Detection & Operations, Cyber Threat Intelligence, and CSIRT to deliver high-quality, backward-compatible changes to large-volume, high-criticality data feeds and SecOps integrations. You will lead troubleshooting and root-cause analysis across log pipelines and SIEM integrations, participate in a shared 24/7 on-call rotation, and implement preventative mechanisms through monitoring, runbooks, and automation.

This technical contributor role involves building ingestion integrations and operational tooling with Python and regular expressions for parsing, validation, transformations, and schema evolution across standard and non-standard formats. You will develop monitoring and alerting aligned to platform SLOs/SLAs, improving completeness, timeliness, and quality while reducing incident recurrence and mean time to resolution. You will collaborate across teams to prioritize work, unblock partners, and continuously improve telemetry quality and platform performance. The role is Hybrid/Flex for Your Day, requiring work both onsite at the assigned Target HQ Minnesota location and virtually according to role, team, and task needs. Work duties cannot be performed outside the country of the primary work location unless otherwise prescribed by Target. Job duties may change at any time due to business needs.

Requirements

• A four-year degree in Computer Science or a related field, or equivalent practical experience.
• At least 3 years of software development and/or platform engineering experience.
• Proven experience building and operating systems in a public cloud environment.
• Proficiency in Python.
• Proficiency with regular expressions for parsing, extraction, and validation.
• Experience integrating systems using APIs, including authentication and authorization concepts.
• Experience ingesting, transforming, and validating log/event data across standard and non-standard formats such as JSON, Syslog, CEF, and CSV/TSV, including schema changes and backward compatibility.
• Demonstrated production troubleshooting and root-cause analysis skills, including follow-through with preventative fixes such as monitoring, runbooks, and automation.
• Understanding of distributed systems fundamentals and resilience patterns such as timeouts, retries, and idempotency.
• Experience migrating services or data flows between provider platforms, such as on-premises to cloud or cloud to on-premises.
• Willingness to participate in a shared 24/7 on-call rotation.

Responsibilities

• Own and improve end-to-end log ingestion into Google SecOps, from source onboarding through reliable shipment.
• Design and deliver scalable improvements to ingestion pipelines, integrations, and data validation, including feed health signals and shipment validations.
• Partner with Threat Management Engineering, Threat Detection & Operations, Cyber Threat Intelligence, and CSIRT on high-quality, backward-compatible changes to critical data feeds and SecOps integrations.
• Lead troubleshooting and root-cause analysis across log pipelines and SIEM integrations, including other SIEM platforms.
• Participate in a shared 24/7 on-call rotation and implement preventative mechanisms through monitoring, runbooks, and automation.
• Build and enhance ingestion integrations and operational tooling using Python and regular expressions for parsing, validation, transformations, and schema evolution.
• Develop monitoring and alerting aligned to platform SLOs/SLAs to improve completeness, timeliness, and quality and reduce incident recurrence and MTTR.
• Collaborate across teams to prioritize work, unblock partners, and improve telemetry quality and platform performance.
• Communicate clearly during incidents and follow investigations through to durable preventative fixes.

Benefits

• Eligible team members and their dependents may receive comprehensive health benefits, which may include medical, vision, dental, and life insurance.
• 401(k)
• Employee discount
• Short-term disability
• Long-term disability
• Paid sick leave
• Paid national holidays
• Paid vacation

What This Job Offers

• Job Type: Full-time
• Career Level: Senior