Cloud Engineer

Lead Engineer Cloud SecurityAs a Lead Engineer on the Cloud Security team, you'll be the senior software engineer building and owning the services that turn Target's cloud security signal into action. Cloud Security at Target is one team with two engineering disciplines — platform engineers who deploy, tune, and operate the cloud security controls (CSPM/CNAPP, IaC scanning, admission control, SSPM, workload protection), and software engineers who build the services that aggregate, attribute, enrich, and distribute the findings those controls produce, plus the broader backend that the team's capabilities depend on. You will lead the software engineering side of that partnership.Beyond deep technical expertise, you have a strong bias for action and a builder's mindset. The team's software sits between the controls that produce findings and the product and platform engineers who have to act on them, and you are comfortable operating in that realm – translating security requirements into reliable, well-tested backend services; owning the day-to-day operation and continuous improvement of the findings pipeline and adjacent services; coordinating APIs, data contracts, and developer-experience tradeoffs with the platform engineers on your team and with the consumers of your services; and partnering with peers so cloud security findings flow into the enterprise remediation lifecycle. You have the engineering credibility to set technical direction for other software engineers on the team and the communication and partnership skills to make the services land well across Target.Core responsibilities are described within this job description. Job duties may change at any time due to business needs.About You:• 4-year degree in Computer Science, Engineering, or a related field, OR equivalent work experience• 7+ years of software engineering experience, with a strong track record of leading the design and delivery of complex, platform-oriented backend systems• Deep hands-on experience with Kotlin, Java, and Spring Boot, and strong fluency in at least one additional modern language• Demonstrated experience as a tech lead owning a software capability end-to-end at enterprise scale, including setting technical direction that other engineers execute against• Deep experience designing, building, and operating distributed, event-driven, and data-intensive backend services in production• Strong experience designing RESTful APIs, service-to-service integrations, and event streams that other teams depend on• Experience building and operating findings, event, or telemetry pipelines that aggregate signal from multiple sources, deduplicate and enrich it, and route it to downstream systems with SLAs• Strong opinions, backed by experience, on how to keep signal-to-noise high in a findings or alert pipeline: deduplication, correlation, suppression discipline, ownership attribution, and SLA-based remediation• Track record of running production services with clear SLOs, on-call coverage, change management, and continuous-improvement loops• Experience driving multi-quarter roadmaps end-to-end — from problem framing through rollout, adoption, and steady-state operation — and delivering predictably against them• Comfortable making and defending pragmatic build-vs-buy decisions, and knowing when to invest in custom engineering vs. lean on an existing capability• Strong experience with relational databases, cloud-based data warehouses, schema design, data migrations, and data lifecycle considerations; experience with event-streaming technologies such as Kafka or Pub/Sub• Hands-on experience with public cloud (GCP preferred; AWS/Azure experience also valued) and with containers and orchestration (Docker, Kubernetes) at enterprise scale• Strong understanding of automated testing — unit, integration, contract, regression, and end-to-end — and a demonstrated commitment to shipping code with tests, not around them• Strong understanding of observability practices and tools for metrics, logging, tracing, alerting, and service-level objectives• Hands-on experience integrating backend services with developer workflows (CI/CD, source control, ticketing) in a way that scales with a large engineering organization• Strong understanding of secure software development practices and modern cloud-native architectures• Solid understanding of AI/ML and the emerging engineering considerations associated with it, including the responsible use of AI-assisted and agentic engineering tools such as Claude Code, OpenCode, or Codex• Strong cross-functional partner: comfortable working closely with a variety of security and product engineering teams to align requirements, rollout plans, and operational ownership• Effective at representing your work, risks, and tradeoffs to senior leadership, and equally effective explaining the same content to staff engineers in detail• Excellent written and verbal communication skills with strong presentation abilities• Demonstrated curiosity, bias for action, and a genuine builder's mindset — you want to ship the services, not just describe themPreferred Qualifications:• Experience working in cybersecurity, cloud security, or another highly available and risk-sensitive production environment• Familiarity with CSPM, CNAPP, IaC scanning, admission control, SSPM, or cloud workload protection tooling and the shape of the findings they produce• Experience integrating with security analytics, SIEM, SOAR, detection, or response platforms• Experience with policy-as-code (e.g., Rego) and infrastructure as code (Terraform and equivalent)