{"id":54313,"url":"https://alion.io/job/target-principal-engineer-application-security-sdlc-sast-dast-sca-threat-modeling-pen-testing-devsecops-ai","title":"Principal Engineer - Application Security (AI security, Pen Testing, DevSecOps)","company":{"id":3684,"name":"Target","domain":"target.com","url":"https://alion.io/company/target","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":93,"open_postings":345,"ghost_share":0.02,"stale_share":0.406,"repost_share":0.038,"time_to_fill_p50_days":8,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Brooklyn Park, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":168000,"max":303000,"currency":"USD","period":"year","gross":null,"usd_annual":303000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"Kubernetes","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-08-12T00:00:00Z","employer_posted_date":"2026-08-21","last_verified_at":"2026-11-03T02:04:09Z","board_verified":true,"closed_at":null,"days_open":83,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":82},"description":"The pay range is $168,000.00 - $303,000.00Pay is based on several factors which vary based on position. These include labor markets and in some instances may include education, work experience and certifications. In addition to your pay, Target cares about and invests in you as a team member, so that you can take care of yourself and your family. Target offers eligible team members and their dependents comprehensive health benefits and programs, which may include medical, vision, dental, life insurance and more, to help you and your family take care of your whole selves. Other benefits for eligible team members include 401(k), employee discount, short term disability, long term disability, paid sick leave, paid national holidays, and paid vacation. Find competitive benefits from financial and education to well-being and beyond at https://corporate.target.com/careers/benefits.\nJOIN TARGET AS A PRINCIPAL ENGINEER - APPLICATION SECURITY\nAbout us:\nWorking at Target means helping all families discover the joy of everyday life. We bring that vision to life through our values and culture. Learn more about Target here. \nAbout the Role:\nWe are seeking a Principal Application Security Engineer to provide technical leadership for our enterprise Application Security program. This role is responsible for advancing secure development practices, integrating security into the software development lifecycle, and partnering with engineering teams to reduce application risk through scalable security solutions.\nThe ideal candidate combines deep technical expertise with strategic thinking, enables developers, scales security through automation, and influences engineering organizations without direct authority.\nApplication Security Expertise\nProvide technical leadership across Secure Software Development Lifecycle (SSDLC), Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), Threat Modeling, and Penetration Testing.\nGuide engineering teams in vulnerability remediation and secure coding best practices.\nEvaluate emerging application security technologies, emerging risks, and recommend pragmatic, risk-based improvements to application security capabilities.\nPartner with Security Architecture to ensure application security practices align with enterprise security standards and design principles.\nSoftware Engineering and Automation\nDesign and build automation that integrates security seamlessly into CI/CD pipelines.\nDevelop tooling, APIs, and automation to improve developer experience and reduce manual effort.\nPartner with platform engineering teams to implement security controls within modern development workflows.\nIdentify and implement opportunities to leverage AI and generative AI technologies to improve application security processes, automate repetitive tasks, enhance developer enablement, and accelerate vulnerability detection and remediation while ensuring responsible and secure use of AI.\nSecurity Strategy and Program Leadership\nHelp define the technical roadmap for the Application Security program.\nDevelop strategies that scale security across a large engineering organization through automation, standardization, and self-service capabilities.\nChampion developer enablement by creating security guidance, reusable frameworks, documentation, and training.\nEstablish and track metrics that measure program effectiveness and continuously improve security maturity.\nCross-Functional Collaboration\nInfluence technical decisions through collaboration and technical leadership rather than organizational authority.\nCommunicate security risks and recommendations effectively to technical and non-technical audiences.\nMentor engineers and promote security best practices across the organization.\nProblem Solving and Technical Leadership\nSolve complex application security challenges involving modern software architectures and cloud-native platforms.\nDrive continuous improvement across security tooling, developer workflows, and vulnerability management processes.\nProvide technical leadership during the investigation and remediation of significant application security issues.\nCore responsibilities of this job are described within this job description.\nJob duties may change at any time due to business needs.\nAbout You:\nBS/MS in Computer Science, Information Security, Engineering or equivalent industry work experience\n10+ years of experience in software engineering, application security or related security engineering roles\nDemonstrated expertise across SSDLC, SAST, DAST, SCA, Threat Modeling, and Penetration Testing\nStrong software development experience in one or more modern programming languages\nExperience integrating security into modern CI/CD pipelines and DevSecOps workflows\nProven experience building and scaling Application Security programs across large engineering organizations\nExperience leveraging AI and Generative AI technologies to improve engineering productivity, security operations, or software development workflows\nDemonstrated ability to evaluate, implement, and govern AI-enabled solutions while considering security, privacy, and organizational risk\nExcellent communication, collaboration, and stakeholder management skills\nDemonstrated ability to influence technical direction across multiple teams\nExperience securing cloud-native applications in AWS, Azure or Google Cloud\nExperience with Kubernetes, containers, APIs, and microservices architectures\nExperience developing custom security tooling or automation\nKnowledge of modern software supply chain security practices\nIndustry certifications such as CISSP, CSSLP, GIAC, OSCP, or cloud security certifications a plus\nThis position will operate as a Hybrid/Flex for Your Day work arrangement based on Target’s needs. A Hybrid/Flex for Your Day work arrangement means the team member’s core role will need to be performed both onsite at the Target HQ MN location the role is assigned to and virtually, depending upon what your role, team and tasks require for that day. Work duties cannot be performed outside of the country of the primary work location, unless otherwise prescribed by Target. Click here if you are curious to learn more about Minnesota.\nBenefits Eligibility\nPlease paste this url into your preferred browser to learn about benefits eligibility for this role: https://tgt.biz/BenefitsForYou_FAmericans with Disabilities Act (ADA)\nIn compliance with state and federal laws, Target will make reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please reach out to -accommodation-relatedrequests, such as application follow-ups or technical issues, will not be addressed through this channel.\nApplication deadline is : 09/24/2026","description_format":"text","description_chars":6894,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","DevSecOps","E-commerce Platforms","Online Groceries"],"lifecycle":[{"event":"open","at":"2026-08-12T00:00:00Z"},{"event":"close","at":"2026-08-13T16:44:23Z"},{"event":"reopen","at":"2026-08-29T21:32:27Z"}],"visa":[],"liveness":{"score":8,"band":"cold","label":"Long shot","p_open":1,"p_active":0.297,"p_room":0.28,"age_days":82,"expected_fill_days":8,"reasons":["conf:9","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":{"stated_usd_annual":303000,"is_top_pay":true},"html_url":"https://alion.io/job/target-principal-engineer-application-security-sdlc-sast-dast-sca-threat-modeling-pen-testing-devsecops-ai","json_url":"https://alion.io/job/target-principal-engineer-application-security-sdlc-sast-dast-sca-threat-modeling-pen-testing-devsecops-ai.json","meta":{"generated_at":"2026-11-03T02:35:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3411,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3684},"rest":"https://alion.io/mcp/rest/get_company?id=3684"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftarget-principal-engineer-application-security-sdlc-sast-dast-sca-threat-modeling-pen-testing-devsecops-ai"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftarget-principal-engineer-application-security-sdlc-sast-dast-sca-threat-modeling-pen-testing-devsecops-ai"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftarget-principal-engineer-application-security-sdlc-sast-dast-sca-threat-modeling-pen-testing-devsecops-ai"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/target-principal-engineer-application-security-sdlc-sast-dast-sca-threat-modeling-pen-testing-devsecops-ai\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftarget-principal-engineer-application-security-sdlc-sast-dast-sca-threat-modeling-pen-testing-devsecops-ai"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":54313}},{"tool":"search_jobs","arguments":{"company":"target.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":54313},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}