About the position
The Lead Engineer – Security Architecture at Target is responsible for ensuring that systems are designed and built securely. This role involves collaborating with technical and leadership teams to identify security risks, develop mitigation strategies, and integrate security functions into system architecture. The position requires a deep understanding of security risks, controls, and standards, along with exceptional interpersonal skills to foster collaboration across the enterprise.
Responsibilities
• Collaborate with system designers to integrate security requirements into the design phase of IT systems
,
• Develop and maintain security architecture documentation, including security models, frameworks, and diagrams
,
• Ensure that security architecture aligns with the organization’s business objectives and regulatory requirements
,
• Understand security risks in order to identify potential vulnerabilities and threats
,
• Develop risk mitigation strategies and recommend appropriate security controls
,
• Design and implement security solutions, including firewalls, encryption protocols, and access control mechanisms
,
• Collaborate with development and operations teams to ensure secure creation and deployment of IT systems
,
• Provide guidance on secure coding practices
,
• Prioritize driving highly impactful changes that improve the business
,
• Conduct full-stack architecture reviews of products and platforms
,
• Provide expertise on information security for complex systems and applications in cloud and on-prem environments
,
• Design security reference architectures and create configuration guides
,
• Provide expertise on creation and implementation of security controls with an emphasis on cloud technologies
,
• Efficiently assess and communicate risk accurately while negotiating priorities with cross-domain stakeholders
,
• Collaborate with engineering teams to perform advanced security analysis on complex cloud systems, identifying gaps while contributing to design solutions and security requirements
Requirements
• 4-year degree or equivalent work experience
,
• Polyglot programmer comfortable in many languages across different platforms with ability to demonstrate secure software development skills
,
• Proven history of effectively utilizing a variety of security tools and technologies across diverse environments
,
• 7+ years of hands-on experience in technology with extensive knowledge of Cyber Security domains including Information Protection, Cryptography, Cloud Security, Networking Security, IAM, Automation and SIEM
,
• In-depth knowledge of security frameworks, standards and best practices (e.g., NIST, ISO/IEC 27001)
,
• Good understanding of security management workflows in large enterprise organizations and complex environments
,
• Has a good understanding of the current threat landscape and the challenges that most organizations are facing
,
• Expertise in containerization technologies and tools such as Kubernetes
,
• Solid understanding of AI and ML
,
• Excellent written and verbal interpersonal skills with strong presentation abilities
,
• Excellent analytical and problem-solving skills
,
• Stays current on relevant technologies with self-directed learning
Nice-to-haves
Benefits
• Comprehensive health benefits including medical, vision, dental, and life insurance
,
• 401(k) plan
,
• Employee discount
,
• Short term and long term disability
,
• Paid sick leave
,
• Paid national holidays
,
• Paid vacation