Engineer - ECHO

The pay range is $75,400.00 - $135,700.00

Pay is based on several factors which vary based on position. These include labor markets and in some instances may include education, work experience and certifications. In addition to your pay, Target cares about and invests in you as a team member, so that you can take care of yourself and your family. Target offers eligible team members and their dependents comprehensive health benefits and programs, which may include medical, vision, dental, life insurance and more, to help you and your family take care of your whole selves. Other benefits for eligible team members include 401(k), employee discount, short term disability, long term disability, paid sick leave, paid national holidays, and paid vacation. Find competitive benefits from financial and education to well-being and beyond at

About us:
Target is an iconic brand, a Fortune 50 company and one of America's leading retailers.

Target as a tech company? Absolutely. We're the behind-the-scenes powerhouse that fuels Target's passion and commitment to cutting-edge innovation. We anchor every facet of one of the world's best-loved retailers with a strong technology framework that relies on the latest tools and technologies-and the brightest people-to deliver incredible value to guests online and in stores. Target Technology Services is on a mission to offer the systems, tools and support that guests and team members need and deserve. Our high-performing teams balance independence with collaboration, and we pride ourselves on being versatile, agile and creative. We drive industry-leading technologies in support of every angle of the business, and help ensure that Target operates smoothly, securely and reliably from the inside out.

As a SIEM Engineer, you will:

• Learn and contribute to end-to-end log ingestion into Google SecOps (formerly Chronicle)-from source onboarding through reliable delivery-so downstream teams can power search, alerting, enrichment, and investigations.
• Pair with Threat Management Engineering, Threat Detection & Operations, Cyber Threat Intelligence, and the CSIRT Teams to produce high-quality and backwards compatible changes to large-volume, high-criticality data feeds and SecOps integrations.
• Participate in troubleshooting production issues across log pipelines and SIEM integrations (including other SIEM platforms), as part of a shared 24/7 on-call rotation with strong team support and runbooks.
• Build and enhance ingestion integrations and operational tooling using Python and practical regular expressions for parsing, validation, and transformations (ECS familiarity is a plus).
• Contribute to monitoring and alerting aligned to platform SLOs/SLAs, improving completeness, timeliness, and quality while reducing repeat incidents.
• Partner with Security Operations and adjacent platform owners to onboard feeds, support schema changes, and continuously improve telemetry quality.

In this role, you'll be a hands-on engineer contributing to the log ingestion platform that powers SIEM outcomes. You'll ramp quickly on the platform's architecture and operational patterns, delivering well-scoped improvements to integrations, data handling, and reliability with guidance from senior engineers. You'll apply strong troubleshooting and systems thinking to diagnose issues, implement fixes, and improve monitoring/runbooks so problems don't repeat. Over time, you'll take end-to-end ownership of discrete components and deliver high-quality changes with increasing independence, balancing delivery speed with correctness and operational readiness.

Core responsibilities of this job are described within this job description. Job duties may change at any time due to business needs.

About you:

• 4-year degree in Computer Science (or related field) or equivalent practical experience
• 1+ years of software development and/or platform engineering experience
• Proficiency in Python
• Proficiency with regular expressions for parsing, extraction, and validation
• Experience integrating systems using APIs (including authentication/authorization concepts)
• Experience manipulating and validating log/event data (e.g., JSON), including transformations and schema changes
• Demonstrated troubleshooting and root-cause analysis skills in production or production-like environments
• Understanding of distributed systems fundamentals and common resilience patterns (timeouts, retries, idempotency)
• Willingness to participate in a shared 24/7 on-call rotation

Work Arrangement:


This position will operate as a Hybrid/Flex for Your Day work arrangement based on Target's needs. A Hybrid/Flex for Your Day work arrangement means the team member's core role will need to be performed both onsite at the Target HQ MN location the role is assigned to and virtually, depending upon what your role, team and tasks require for that day. Work duties cannot be performed outside of the country of the primary work location, unless otherwise prescribed by Target. Click here if you are curious to learn more about Minnesota.

Benefits Eligibility
Please paste this url into your preferred browser to learn about benefits eligibility for this role:

Americans with Disabilities Act (ADA)

In compliance with state and federal laws, Target will make reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please reach out to View email address on click.appcast.io. Non-accommodation-related requests, such as application follow-ups or technical issues, will not be addressed through this channel.