{"id":3775141,"url":"https://alion.io/job/target-lead-engineer-operational-technology-security","title":"Lead Engineer – Operational Technology Security","company":{"id":3684,"name":"Target","domain":"target.com","url":"https://alion.io/company/target","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":92,"open_postings":387,"ghost_share":0.018,"stale_share":0.47,"repost_share":0.034,"time_to_fill_p50_days":8,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Brooklyn Park, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":132000,"max":238000,"currency":"USD","period":"year","gross":null,"usd_annual":238000},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DNP3","optional":false},{"name":"Linux","optional":false},{"name":"NIST CSF","optional":false},{"name":"OPC UA","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Windows","optional":false},{"name":"Apache Kafka","optional":true},{"name":"CI/CD","optional":true},{"name":"GitHub Actions","optional":true},{"name":"Google BigQuery","optional":true},{"name":"Power BI","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-11-04T22:58:23Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-06T14:04:49Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"The pay range is $132,000.00 - $238,000.00Pay is based on several factors which vary based on position. These include labor markets and in some instances may include education, work experience and certifications. In addition to your pay, Target cares about and invests in you as a team member, so that you can take care of yourself and your family. Target offers eligible team members and their dependents comprehensive health benefits and programs, which may include medical, vision, dental, life insurance and more, to help you and your family take care of your whole selves. Other benefits for eligible team members include 401(k), employee discount, short term disability, long term disability, paid sick leave, paid national holidays, and paid vacation. Find competitive benefits from financial and education to well-being and beyond at https://corporate.target.com/careers/benefits.\nJob title: Lead Engineer - Operational Technology Security\nMinneapolis-based/hybrid\nJOIN US AS A LEAD ENGINEER - Operational Technology Security\nAbout Us\nWorking at Target means helping all families discover the joy of everyday life. We bring that vision to life through our values and culture. Target is one of the world's most recognized brands and one of America's leading retailers. But behind the brand our guests love, is a culture of continual innovation and right now, we are up to big things! Target's security team is a place where innovation happens daily. Interested in a culture that combines ongoing learning, engineering excellence, and stellar outcomes? We are too - that's why we work here. Join our team to improve Target's security and move the business forward.\nAs a Lead Engineer on the Operational Technology (OT) Security team, you'll operate, integrate, automate, and scale OT security across Target's global supply chain and retail sites. You'll own the engineering and day-to-day operation of Target's OT security platform that covers asset inventory, secure configuration, vulnerability management, event visibility/detection, and many more security use cases. You’ll develop automation to distribute the right findings to the right operational teams so they can resolve security issues safely and in priority order. You'll work across various security and engineering teams so security controls land safely in environments where availability, safety, and keeping product moving matter.\nYou have a builder's mindset, a strong bias for action, and the technical depth to turn standard OT Security control requirements into engineering patterns that teams can implement and that operators want to use.\nExpect to:\nOwn the engineering, configuration, and day-to-day operation of the OT Security platform, including availability, performance, upgrades, licensing, access management, and continuous improvement.\nExpand and maintain sensor and collector coverage and health across OT environments, working with site and network teams on configuration and site installation.\nBuild OT asset discovery, reconciliation, classification, and enrichment. Set minimum inventory-data expectations and work across teams to improve attribution, function, location, criticality, lifecycle, and support metadata.\nMonitor and improve platform data quality. Find and fix coverage and inventory gaps so OT asset, vulnerability, traffic-flow, and secure-configuration data can be trusted by consumers.\nTake in, normalize, correlate, and enrich findings and other OT exposure data, then prioritize risk based on operational consequence, asset criticality, exploitability, exposure, compensating controls, vendor support, maintenance windows, and remediation feasibility.\nOwn secure configuration for OT. Use secure configuration data and other evidence to find security-relevant deviations, develop hardening patterns, prioritize gaps, and validate remediation.\nDevelop shared engineering requirements, technical patterns, and acceptance criteria jointly with partner teams for network segmentation and vendor access patterns. Provide OT traffic-flow, asset, exposure, and operational-context data to support architecture and operations. Develop and implement methodologies for measuring adherence to the prescribed patterns.\nDocument and track exceptions and compensating controls for OT systems that can't be remediated through normal processes because of vendor lockout, safety constraints, or product-movement schedules. Report remaining risk through the right governance process.\nGive OT-specific triage, remediation guidance, and closure validation to OT Infrastructure, site teams, system owners, and vendors.\nBuild and maintain OT Security platform integrations and automation (APIs, connectors, scripts) and work closely with the team's data-integration engineers to move OT data into enterprise dashboards, ticketing, and remediation workflows with clear ownership and SLAs.\nContribute to security engineering consultations on new or significantly changed OT solutions, including vendor and product evaluations, design reviews, hardening requirements, and vulnerability-management expectations.\nReduce toil for the team and for OT operations partners through automation, self-service, runbooks, and reusable engineering patterns.\nManage OT security vendor relationship day to day, including support cases, capability adoption, roadmap feedback, and input to evaluations and POCs.\nMentor other engineers and share your OT security knowledge across Target's cybersecurity and OT engineering community.\nCore responsibilities are described within this job description. Job duties may change at any time due to business needs.\nAbout You:\n4-year degree OR equivalent work experience\n6+ years of hands-on experience in security engineering, infrastructure, or platform engineering, including significant experience securing OT/ICS environments\nHands-on experience engineering and operating an OT asset visibility and exposure platform at enterprise scale, such as Claroty XDome, Nozomi, Dragos, Armis, Tenable OT, or similar. This includes sensor/collector deployment and health, coverage, data quality, and integrations\nStrong understanding of OT/ICS fundamentals: the Purdue Model, IT/OT boundary patterns, PLCs, HMIs, SCADA, industrial switches, Windows/Linux OT servers, and vendor-managed subsystems\nWorking knowledge of industrial protocols (e.g., Modbus, DNP3, OPC-UA, EtherNet/IP, PROFINET), with a clear sense of when passive or active discovery is appropriate\nExperience with OT asset inventory: discovery, reconciliation, classification, and enrichment, and working with authoritative inventory owners to close gaps\nExperience with OT vulnerability and exposure management, including risk-based prioritization, exception tracking, compensating controls, and closure validation\nExperience with secure-configuration baselines and hardening for OT servers, HMIs, and industrial endpoints\nHands-on familiarity with ISA/IEC 62443 and related frameworks (NIST CSF, NIST SP 800-82), and the ability to turn control requirements into practical engineering patterns and acceptance criteria\nScripting and automation skills in at least one language (e.g., Python), plus experience working with REST APIs and integrating security tools with enterprise systems\nExperience running production platforms with change management, monitoring, and continuous-improvement practices in environments where availability and safety come first\nWorking knowledge of OT network segmentation, DMZs, jump hosts, and vendor remote access\nUnderstanding of the current OT threat landscape, including IT-to-OT pivots, vendor remote access abuse, ransomware impact on OT-adjacent hosts, and ICS-specific malware, and how it should shape prioritization\nStrong cross-functional partner who can build trust with operational teams, site teams, and vendors, and treats operator experience as a first-class concern\nExcellent written and verbal communication skills, including the ability to explain technical OT risk to both engineers and non-security leaders\nDemonstrated curiosity, ownership, and a builder's mindset\nNice to have: experience with Kafka, BigQuery, PowerBI, Terraform, CI/CD, or GitHub Actions\nThis position will operate as a Hybrid/Flex for Your Day work arrangement based on Target's needs. A Hybrid/Flex for Your Day work arrangement means the team member's core role will need to be performed both onsite at the Target HQ MN location the role is assigned to and virtually, depending upon what your role, team and tasks require for that day. Work duties cannot be performed outside of the country of the primary work location, unless otherwise prescribed by Target. Click here if you are curious to learn more about Minnesota.\nBenefits Eligibility\nPlease paste this url into your preferred browser to learn about benefits eligibility for this role: https://tgt.biz/BenefitsForYou_EAmericans with Disabilities Act (ADA)\nIn compliance with state and federal laws, Target will make reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please reach out to -accommodation-relatedrequests, such as application follow-ups or technical issues, will not be addressed through this channel.","description_format":"text","description_chars":9316,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Retail & Shop Systems","Online Groceries"],"lifecycle":[{"event":"open","at":"2026-11-04T22:58:23Z"}],"visa":[],"liveness":{"score":89,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.892,"p_room":1,"age_days":1,"expected_fill_days":8,"reasons":["conf:2","velocity","win:early","comp:brand"],"computed_at":"2026-11-06T05:58:05Z"},"pay":{"stated_usd_annual":238000,"is_top_pay":true},"html_url":"https://alion.io/job/target-lead-engineer-operational-technology-security","json_url":"https://alion.io/job/target-lead-engineer-operational-technology-security.json","meta":{"generated_at":"2026-11-06T17:09:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31981,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3684},"rest":"https://alion.io/mcp/rest/get_company?id=3684"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftarget-lead-engineer-operational-technology-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftarget-lead-engineer-operational-technology-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftarget-lead-engineer-operational-technology-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/target-lead-engineer-operational-technology-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftarget-lead-engineer-operational-technology-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3775141}},{"tool":"search_jobs","arguments":{"company":"target.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3775141},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}