Principal Security Engineer – Business Information Security Office (BISO)

• Bachelor's degree in information security, computer science, or related field; or related experience
• 10+ years of engineering experience in one or more information security domains (e.g., vulnerability management, threat intelligence, application security, incident response, risk management, etc.)
• 5+ years of experience leading both technical and strategic planning and strategy
• Experience defining security requirements, managing findings, and mitigating risk across dozens of unique business lines, hundreds of distinct applications, and thousands of stakeholders

• Master's degree in information security, computer science, or related field; or related experience
• 5+ years of engineering experience in Operational Technology (OT) or Internet-of-Things (IOT) security
• 5+ years of engineering experience in network architecture, network design, or network segmentation
• Experience designing, developing, and scaling security solutions that enable developers and technology solutions to be "secure-by-default" (e.g., auto-patching, credential rotation, etc.)
• Demonstrated experience harmonizing and aligning business needs with security requirements to ensure security threats and risks are properly identified and managed
• Executive-level communication skills, both verbal and written, capable of effectively articulating technical topics to a wide range of stakeholders to drive understanding and alignment
• Proven ability to own enterprise-wide security projects or programs (e.g. Patch Management, Risk Management, etc.), including building project plans, identifying stakeholders, communicating progress, and addressing roadblocks
• Experience with both on-prem (e.g., bare metal servers, firewalls, etc.) and cloud-based (e.g., GCP, AWS, Azure, etc.) infrastructure
• Experience leveraging AI tools (e.g., Claude, ChatGPT, etc.) to measurably improve the effectiveness or operations of a security tool or mechanism
• Experience with common security tooling (e.g., SIEM, DLP, IDS, IPS, etc.)
• Experience with common security frameworks (e.g., NIST, ISO/IEC 27001, PCI-DSS, etc.)
• Relevant security industry certifications (e.g., CISSP, CISM, OSCP, etc.)

This position may be considered for a Remote or Hybrid (known internally at Target as "Flex for Your Day") work arrangement based on Target's needs.  A Remote work arrangement means the team member works full-time from home or an alternate location that's not a Target location, does not have a desk at a Target location and may travel to HQ up to 4 times a year.  A Hybrid/Flex for Your Day work arrangement means the team member's core role may be performed either remote or onsite at a Target location depending upon what your role, team and tasks require for that day. Work duties cannot be performed outside of the country of the primary work location, unless otherwise prescribed by Target.