Principal Engineer - Operational Technology Security

About Us

Working at Target means helping all families discover the joy of everyday life. We bring that vision to life through our values and culture. Cybersecurity at Target is on a mission to secure the systems, tools, and processes that team members and guests interact with every day. We drive industry-leading technologies in support of every angle of the business, and help ensure that Target operates smoothly, securely, and reliably from the inside out.

About the Role

As the Principal Security Engineer for Operational Technology (OT), you will take ownership in designing, building, and scaling security solutions to secure Target’s operational tech across supply chain, stores, and corporate offices. Leveraging your security and risk management experience, you will work across Target technology and business teams to define security requirements, assess risk, and develop mitigation strategies. You will leverage your deep engineering and technical expertise to force-multiply your impact by building new security solutions and influencing across your peers and partner teams. Finally, you will act as a leader within our organization, constantly working to uplevel our team by mentoring your team members in security concepts, operational technology, and engineering best practices.

Responsibilities

• Design, build, and scale security solutions to secure Target’s operational technology across supply chain, stores, and corporate offices.
• Define security requirements, assess risk, and develop mitigation strategies in collaboration with technology and business teams.
• Leverage deep engineering and technical expertise to influence peers and partner teams.
• Mentor team members in security concepts, operational technology, and engineering best practices.
• Lead enterprise-wide security projects or programs, including building project plans, identifying stakeholders, communicating progress, and addressing roadblocks.

Requirements

• Bachelor’s degree in information security, computer science, or related field; or related experience.
• 10+ years of engineering experience in one or more information security domains (e.g., vulnerability management, threat intelligence, application security, incident response, risk management, etc.).
• 5+ years of engineering experience in Operational Technology (OT) or Internet-of-Things (IoT) security.
• 5+ years of engineering experience in network architecture, network design, or network segmentation.
• 5+ years of experience leading both technical and strategic planning and strategy.
• Experience defining security requirements, managing findings, and mitigating risk across dozens of unique business lines, hundreds of distinct applications, and thousands of stakeholders.

Preferred Qualifications

• Master’s degree in information security, computer science, or related field; or related experience.
• Experience designing, developing, and scaling security solutions that enable developers and technology solutions to be “secure-by-default” (e.g., auto-patching, credential rotation, etc.).
• Demonstrated experience harmonizing and aligning business needs with security requirements to ensure security threats and risks are properly identified and managed.
• Executive-level communication skills, both verbal and written, capable of effectively articulating technical topics to a wide range of stakeholders to drive understanding and alignment.
• Experience with both on-prem (e.g., bare metal servers, firewalls, etc.) and cloud-based (e.g., GCP, AWS, Azure, etc.) infrastructure.
• Experience leveraging AI tools (e.g., Claude, ChatGPT, etc.) to measurably improve the effectiveness or operations of a security tool or mechanism.
• Experience with Operational Technology (OT) Security standards such as ISA/IEC 62443 or NIST SP 800-82 Rev 3.
• Experience with common security tooling (e.g., SIEM, DLP, IDS, IPS, etc.).
• Experience with common security frameworks (e.g., NIST, ISO/IEC 27001, PCI-DSS, etc.).
• Relevant security industry certifications (e.g., CISSP, CISM, OSCP, etc.).

Benefits

• Comprehensive health benefits and programs, which may include medical, vision, dental, life insurance, and more.
• 401(k) retirement plan.
• Employee discount.
• Short-term and long-term disability coverage.
• Paid sick leave, national holidays, and vacation.

Find competitive benefits from financial and education to well-being and beyond at Target Benefits.

Pay

The pay range for this position is $168,000.00 - $303,000.00. Pay is based on several factors, including labor markets, education, work experience, and certifications.

Schedule

This position operates as a Hybrid/Flex for Your Day work arrangement based on Target’s needs. The role requires performance both onsite at the Target HQ in Minnesota and virtually, depending on the day’s tasks. Work duties cannot be performed outside of the country of the primary work location.