Lead Engineer - Red Team

Pay is based on several factors which vary based on position. These include labor markets and in some instances may include education, work experience and certifications. In addition to your pay, Target cares about and invests in you as a team member, so that you can take care of yourself and your family. Target offers eligible team members and their dependents comprehensive health benefits and programs, which may include medical, vision, dental, life insurance and more, to help you and your family take care of your whole selves. Other benefits for eligible team members include 401(k), employee discount, short term disability, long term disability, paid sick leave, paid national holidays, and paid vacation. Find competitive benefits from financial and education to well-being and beyond at https://corporate.target.com/careers/benefits.

JOIN TARGET CYBERSECURITY AS A LEAD ENGINEER - RED TEAM

About Us

Working at Target means helping all families discover the joy of everyday life. We bring that vision to life through our values and culture. Learn more about Target here.

The Cyber Fusion Center is the heart of Target’s security team and a place where innovation happens daily. Interested in a culture that combines ongoing learning, engineering excellence, and stellar outcomes? We are too and that’s why we work here. Join our team to work on ops that drive real change by leveraging adversary behavior to communicate discovered risk effectively, and benefit from continuous development and research.

About Red Team

Target's Red Team uses adversary simulation to uncover risk in our environment, provide training opportunities to defenders, and measure the processes and technology defending the organization. We leverage a high level of collaboration between teams as we drive organizational improvement. Our objective-driven operations are supplemented with direct training and development, Purple Team work, and consulting within the company on security risk. As a Red Team Lead Engineer, you will conduct and lead operations, contribute to the team, influence team direction, and collaborate with partner teams. This Lead Engineer role is an operator role, and not a management role. The “Lead” title reflects the seniority of the role, and the responsibility of mentoring more junior operators. In most, but not all circumstances, the experience required to meet the requirements of this role would require a candidate to have previous Red Team experience, not just experience in the offensive security industry.

Red Team members regularly:

• Consult on, design, and execute adversary emulation operations
• Conduct research into real-world threat actor tactics, techniques, and procedures to develop proof-of-concept tools and playbooks
• Bypass preventative and detective security controls to accomplish operational goals
• Partner with the Cyber Security Incident Response Team and other stakeholders in the organization to identify improvement opportunities
• Collaborate with Cyber Threat Intelligence, Detection, and Threat Hunting engineers and analysts on research
• Work with non-security engineering teams to educate, and collaborate on operational objectives

Expect To:

• Develop strategic adversary emulation objectives and operational plans
• Execute adversary emulation operations to surface risk in the organization
• Work with partner teams to plan cooperative engagements
• Lead and train operators
• Communicate effectively with and directly support defenders
• Present findings and operational work to groups in a clear and professional manner
• Study the techniques of Threat Actors, and apply that lens to operational work
• Partner with other Team Members to improve tools and procedures
• Manage work effectively in the team’s project management tools (Github/JIRA)
• Respond to the quick-changing needs and priorities of the team
• Read and write code to accomplish red team goals
• Deeply understand red team infrastructure

About You

• Four years minimum experience in offensive security and/or defensive security
• Demonstrates strong offensive security knowledge
• Demonstrates strong understanding of the impact of Red Team work on an organization and its customers
• Prioritizes process improvement
• Seeks out cross-functional collaboration opportunities
• Clearly and respectfully communicates technical issues in a training or mentorship setting
• Resolves complex technical issues with minimal assistance
• Builds strong commitment within a team to support the appropriate priorities
• Stays current on relevant technologies with self-directed learning

Desirable Skills:

• Deep Red Team adversary emulation experience
• Experience working on or with Blue Teams, including Incident Response, or Detection
• Experience working in large, complex organizations
• Python, C#, Rust, Go, or C skills
• Solving difficult problems, and creatively subverting systems
• Ability to replicate the tools and techniques of in-the-wild threat actors
• Follows Threat Actor trends impacting organizational security

Benefits Eligibility

Americans with Disabilities Act (ADA)

In compliance with state and federal laws, Target will make reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please reach out to candidate.accommodations@HRHelp.Target.com.Non-accommodation-relatedrequests, such as application follow-ups or technical issues, will not be addressed through this channel.