Senior Engineer - Red Team Operator (Remote Eligible)

Senior Engineer - Red Team

Working at Target means helping all families discover the joy of everyday life. We bring that vision to life through our values and culture. Learn more about Target here.

The Cyber Fusion Center is the heart of Target's security team and a place where innovation happens daily. Interested in a culture that combines ongoing learning, engineering excellence, and stellar outcomes? We are too and that's why we work here. Join our team to work on ops that drive real change by leveraging adversary behavior to communicate discovered risk effectively, and benefit from continuous development and research.

Target's Red Team uses adversary simulation to uncover risk in our environment, provide training opportunities to defenders, and measure the processes and technology defending the organization. We leverage a high level of collaboration between teams as we drive organizational improvement. Our objective-driven operations are supplemented with direct training and development, Purple Team work, and consulting within the company on security. As a Red Team Senior Engineer, you will conduct operations, contribute to the team, and influence team direction.

Red Team members regularly:

• Consult on, design, and execute adversary emulation operations
• Conduct research into real-world threat actor tactics, techniques, and procedures to develop proof-of-concept tools and playbooks
• Bypass preventative and detective security controls to accomplish operational goals
• Partner with the Cyber Security Incident Response Team and other stakeholders in the organization to identify improvement opportunities
• Collaborate with Cyber Threat Intelligence, Detection, and Threat Hunting engineers and analysts on research
• Work with non-security engineering teams to educate, and collaborate on operational objectives

Expect to:

• Execute adversary emulation and simulation operations
• Bypass preventative and detective controls to accomplish operational goals
• Conduct research into the real-world threat actors, techniques, and procedures to develop and document proof-of-concept tools and playbooks
• Take direction from Lead and Principal engineers on specific tool documentation tasks to advance team's overall strategic goals
• Partner with the cybersecurity Incident Response Team, Threat Management, and other stakeholders in the organization to identify improvement opportunities
• Collaborate with Cyber Threat Intelligence, Detection, and Threat Hunting engineers and analysts on research
• Work with non-security engineering teams to educate, and collaborate on operational objectives
• Consistently grow in your abilities
• Partner with other Team Members to improve tools and procedures, including development

About You:

• 4-year degree or equivalent experience
• 3+ years minimum experience in technology, time in offensive security or defensive is preferred
• Strong offensive security knowledge
• Proficiency in Windows, Linux, or Mac internals and native tools
• Demonstrates understanding of the impact of Red Team work on an organization and its customers
• Seeks out cross-functional collaboration opportunities
• Designs new testing methods and resolves routine and non-routine technical issues with minimal assistance
• Stays current on relevant technologies with self-directed learning

Desirable Skills:

• Deep Red Team adversary emulation experience
• Experience working on or with Blue Teams, including Incident Response, or Detection
• Experience working in large, complex organizations
• Python, C#, Rust, Go, or C skills
• Solving difficult problems, and creatively subverting systems
• Ability to replicate the tools and techniques of in-the-wild threat actors
• Follows Threat Actor trends impacting organizational security

This position may be considered for a Remote or Hybrid (known internally at Target as "Flex for Your Day") work arrangement based on Target's needs. A Remote work arrangement means the team member works full-time from home or an alternate location that's not a Target location, does not have a desk at a Target location and may travel to HQ up to 4 times a year. A Hybrid/Flex for Your Day work arrangement means the team member's core role may be performed either remote or onsite at a Target location depending upon what your role, team and tasks require for that day. Work duties cannot be performed outside of the country of the primary work location, unless otherwise prescribed by Target.