Lead Engineer – Cyber Security Full Stack Engineer

The pay range is $ - $. Pay is based on several factors which vary based on position. These include labor markets and, in some instances, may include education, work experience and certifications.

• Design, maintain, and evolve the SIEM platform across the legacy Next.js/Node.js application stack and new Google Sec Ops integrations, making pragmatic architecture decisions that improve reliability, maintainability, and migration velocity.
• Build full‑stack features in Type Script, React, Express, Temporal, and Bull.
• Partner with Threat Detection & Operations, Cyber Threat Intelligence, CSIRT, and other security teams to translate detection and investigation workflows into technical designs, resolve ambiguous or conflicting requirements, and deliver new or migrated capabilities on Google Sec Ops.
• Contribute independently with minimal supervision and take ownership from problem to delivery.
• Create technical designs for new features and decompose those designs into epics and user stories.
• Review and manually test code written by other team members.
• Own production readiness and operational health for SIEM services, including hosted environments, service users, virtual machines, containers, SSL certificates, databases, PCI compliance, observability, on‑call support, and release quality; troubleshoot issues across the stack and drive durable fixes.
• Own testing from start to finish with automated and manual tests, and participate in level‑1 on‑call rotation.
• Provide technical leadership for engineers contributing to the SIEM platform through design reviews, code reviews, pair programming, and collaborative problem solving.
• Use observability metrics, logs, traces, and user feedback to improve performance, usability, and reliability.
• Manage software releases from start to finish.

• 8+ years of experience building full‑stack applications.
• 2+ years building backend services with Node, Express, and an ORM (e.g. Sequelize).
• 2+ years working with a job scheduler or orchestration framework (e.g. Bull or Temporal).
• 2+ years of experience with relational databases (e.g., MySQL, PostgreSQL).
• 2+ years building React or Next.js applications with Type Script, state management (e.g. Tan Stack Query), form validation (React Hook Form), and component libraries (e.g. MUI).
• 2+ years of experience with a message framework (e.g. Kafka and ActiveMQ) and distributed caching (e.g. Redis).
• Demonstrated ability to define technical designs and evolve system architecture from concept to production.
• Experience working on public or private cloud environments.
• Experience working in large codebases with multiple repositories.
• Familiarity with containerization and using CI/CD pipelines to generate artifacts (e.g. Docker, Docker Swarm, Kubernetes).
• Experience with application observability using APM tools and Open Telemetry.
• Experience with on‑call support.

This position will operate as a Hybrid/Flex for Your Day work arrangement based on Target’s needs. The core role will be performed both onsite at the Target HQ MN location the role is assigned to and virtually, depending upon what the role, team, and tasks require for that day. Work duties cannot be performed outside of the country of the primary work location, unless otherwise prescribed by Target.

Target offers eligible team members and their dependents comprehensive health benefits and programs, including medical, vision, dental, and life insurance. Other benefits include 401(k), employee discount, short‑term and long‑term disability, paid sick leave, paid national holidays, and paid vacation.

Americans with Disabilities Act (ADA):
In compliance with state and federal laws, Target will make reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please reach out to candidate.acc Non‑accommodation‑related requests, such as application follow‑ups or technical issues, will not be addressed through this channel.