Lead Engineer – Cyber Visibility UI Development

Pay & Benefits

The pay range is $ – $.

Pay is based on several factors which vary based on position. These include labor markets and, in some instances, may include education, work experience, and certifications. In addition to your pay, Target cares about and invests in you as a team member, so that you can take care of yourself and your family. Target offers eligible team members and their dependents comprehensive health benefits and programs, which may include medical, vision, dental, life insurance, and more, to help you and your family take care of your whole selves.

Other benefits for eligible team members include 401(k), employee discount, short-term disability, long-term disability, paid sick leave, paid national holidays, and paid vacation. Find competitive benefits from financial and education to well-being and beyond at

Working at Target means helping all families discover the joy of everyday life. We bring that vision to life through our values and culture. Learn more about Target here.

• Design, develop and maintain an established SIEM platform spanning 1 frontend application and 7 backend services by deploying durable interfaces using modern patterns including React & Type Script.
• Mentor junior and senior engineers through design reviews, hands‑on pair programming, and collaborative problem solving.
• Own and evolve the technical architecture of the SIEM platform across both the established full‑stack application and the in‑flight integrations and feature sets built to support Google Sec Ops.
• Operate with a high degree of autonomy, consistently delivering outcomes with minimal oversight.
• Use technical decision authority as you partner with cross‑functional teams to design, build, and deliver new or migrated security detection features and tools on Google Sec Ops, leading design reviews and resolving ambiguity from conflicting requirements through the process.
• Develop and support full‑stack application features, including backend APIs (e.g., Node.js/Express), integrations with Google Sec Ops, and services that power detection and investigation workflows.
• Drive alignment both upstream and downstream as you partner with Threat Detection & Operations, Cyber Threat Intelligence, CSIRT, and platform engineering teams to design and improve detection and investigation capabilities.
• Own reliability, scalability and performance targets as you troubleshoot and resolve issues across existing systems while participating in on‑call rotations and contributing to improvements in observability, resilience, and operational tooling.
• Develop and maintain state management, data‑fetching, and asynchronous workflows (e.g., background processing, job scheduling) to support complex user interactions and long‑running operations.
• Write high‑quality, maintainable code and participate in code reviews and testing practices to uphold engineering standards and facilitate knowledge‑share.
• Contribute to CI/CD pipelines and mechanisms (e.g., Docker Swarm), supporting reliable and repeatable releases.
• Use telemetry, user feedback, and platform metrics to improve application performance, usability, and reliability.

In this role, you are a hands‑on technical contributor responsible for designing, building, and operating critical SIEM application experiences that power security investigations, IOC workflows, and detection authoring le remaining a deeply hands‑on engineer, you are accountable for the technical direction, system health, and overall effectiveness of the SIEM Platform, including its integrations with Sec Ops and the engineers contributing to its success.

You work across the full stack writing clean, scalable, and maintainable code while optimizing for performance and reliability.

You develop React/Type Script interfaces alongside Node.js/Express APIs, asynchronous processing (e.g., Temporal/Bull), and integrations with Google Sec Ops and internal systems—while building a deep understanding of analyst workflows, system architecture, and failure modes. You troubleshoot issues across the application stack, from user‑facing experiences through APIs, background jobs, and external…