Description
As a Lead Engineer on the Cloud Security team, you'll be the senior technical owner of Target's Cloud Security Platform and CSPM capability across our public and private cloud environments.
You'll serve as the technical lead and hands-on owner of the platform, setting technical direction, standards, and roadmap for other engineers.
Key responsibilities include:
- Owning the end-to-end engineering, deployment, configuration, tuning, and ongoing operation of the CSPM/CNAPP platform
- Operating the platform as a production system, ensuring availability, performance, observability, capacity, upgrade cadence, and outage response
- Driving continuous reduction of noise and false positives
- Extending ownership into adjacent CNAPP capabilities
- Partnering with Detection & Response to turn high-signal posture and runtime findings into detections
- Driving multi-quarter initiatives end-to-end
- Making pragmatic build-vs-buy calls within the platform's ecosystem
- Treating the Cloud Security Platform as a product, investing in automation, self-service, and platform thinking
- Continuously reducing toil for both the team and Target's engineering organization
- Owning the developer experience of the platform's findings and controls
- Driving adoption of the platform's coverage across Target Tech
- Integrating cloud security telemetry from the platform into Target's enterprise SIEM/SOAR pipelines and remediation/governance systems
- Partnering with the broader Cloud Platform organization, Identity Security, Network Security, Data Security, Detection & Response, Vulnerability Management, BISO, and product engineering
- Representing the platform's work clearly to senior leadership and staff engineers
- Mentoring other engineers on cloud security, CSPM/CNAPP, and platform engineering practices
Requirements:
- 4-year degree or equivalent work experience
- 7+ years of hands-on experience in technology, with deep experience in cloud security and adjacent disciplines
- Demonstrated experience as a senior IC or tech lead owning a security or platform capability end-to-end at enterprise scale
- Deep hands-on experience deploying, operating, and tuning a CSPM or CNAPP platform in a large multi-cloud environment
- Strong opinions on how to keep CSPM signal-to-noise high
- Track record of running production platforms with clear SLOs, on-call coverage, change management, and continuous-improvement loops
- Experience driving multi-quarter roadmaps end-to-end
- Comfortable making and defending pragmatic build-vs-buy decisions
- Hands-on experience with public cloud and private cloud / Kubernetes environments at enterprise scale
- Working knowledge of Kubernetes and admission controller frameworks
- Strong working knowledge of infrastructure as code and policy-as-code
- Experience building and operating findings pipelines that integrate cloud security signal into enterprise remediation/governance platforms
- Experience integrating cloud telemetry into enterprise SIEM/SOAR pipelines
- Proven history of effectively utilizing a variety of security tools and technologies
- Hands-on experience integrating security tooling with developer workflows
- Strong understanding of secure software development practices, network security fundamentals, and modern cloud-native architectures
- Solid understanding of AI/ML and emerging security considerations
- Automation-first engineering mindset, with hands-on fluency in at least one general-purpose language
- Strong cross-functional partner, comfortable working closely with various security and product engineering teams