Principal Security Engineer - Business Information Security Office (BISO)

Principal Security Engineer For The Business Information Security Office (BISO)Cybersecurity at Target is on a mission to secure the systems, tools, and processes that team members and guests interact with every day. We drive industry-leading technologies in support of every angle of the business, and help ensure that Target operates smoothly, securely, and reliably from the inside out. If you're excited by the opportunity to demonstrate strong ownership and deep technical expertise while solving complex security challenges at scale, we invite you to join us as a Principal Security Engineer for the Business Information Security Office (BISO) organization!As the Principal Security Engineer for BISO, you will take ownership in designing, building, and scaling security solutions to secure Target technologies. Leveraging your security and risk management experience, you will work across Target technology and business teams define security requirements, assess risk, and develop mitigation strategies. You will leverage your deep engineering and technical expertise to force-multiply your impact by building new security solutions and influencing across your peers and partner teams. Finally, you will act as a leader within our organization, constantly working to uplevel our team by mentoring your team members in security concepts and engineering best practices.Core responsibilities of this job are described within this job description. Job duties may change at any time due to business needs.About YouBachelor's degree in information security, computer science, or related field; or related experience10+ years of engineering experience in one or more information security domains (e.g., vulnerability management, threat intelligence, application security, incident response, risk management, etc.)5+ years of experience leading both technical and strategic planning and strategyExperience defining security requirements, managing findings, and mitigating risk across dozens of unique business lines, hundreds of distinct applications, and thousands of stakeholdersPreferredMaster's degree in information security, computer science, or related field; or related experience5+ years of engineering experience in Operational Technology (OT) or Internet-of-Things (IOT) security5+ years of engineering experience in network architecture, network design, or network segmentationExperience designing, developing, and scaling security solutions that enable developers and technology solutions to be "secure-by-default" (e.g., auto-patching, credential rotation, etc.)Demonstrated experience harmonizing and aligning business needs with security requirements to ensure security threats and risks are properly identified and managedExecutive-level communication skills, both verbal and written, capable of effectively articulating technical topics to a wide range of stakeholders to drive understanding and alignmentProven ability to own enterprise-wide security projects or programs (e.g. Patch Management, Risk Management, etc.), including building project plans, identifying stakeholders, communicating progress, and addressing roadblocksExperience with both on-prem (e.g., bare metal servers, firewalls, etc.) and cloud-based (e.g., GCP, AWS, Azure, etc.) infrastructureExperience leveraging AI tools (e.g., Claude, ChatGPT, etc.) to measurably improve the effectiveness or operations of a security tool or mechanismExperience with common security tooling (e.g., SIEM, DLP, IDS, IPS, etc.)Experience with common security frameworks (e.g., NIST, ISO/IEC 27001, PCI-DSS, etc.)Relevant security industry certifications (e.g., CISSP, CISM, OSCP, etc.)This position will operate as a Hybrid/Flex for Your Day work arrangement based on Target's needs. A Hybrid /Flex for Your Day work arrangement means the team member's core role will need to be performed both onsite at the Target HQ MN location the role is assigned to and virtually, depending upon what your role, team and tasks require for that day. Work duties cannot be performed outside of the country of the primary work location, unless otherwise prescribed by Target. Click here if you are curious to learn more about Minnesota.