{"id":1018151,"url":"https://alion.io/job/target-principal-threat-detection-operations-engineer","title":"Principal Threat Detection Operations Engineer","company":{"id":3684,"name":"Target","domain":"target.com","url":"https://alion.io/company/target","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":100,"open_postings":246,"ghost_share":0.028,"stale_share":0.016,"repost_share":0.053,"time_to_fill_p50_days":7,"computed_at":"2026-10-14T06:34:16Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Brooklyn Park, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":168000,"max":303000,"currency":"USD","period":"year","gross":null,"usd_annual":303000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Git","optional":false},{"name":"Kubernetes","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"SQL","optional":false}],"status":"live","first_seen_at":"2026-09-17T00:00:00Z","employer_posted_date":"2026-09-17","last_verified_at":"2026-10-14T18:03:25Z","board_verified":true,"closed_at":null,"days_open":27,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":27},"description":"The pay range is $168,000.00 - $303,000.00Pay is based on several factors which vary based on position. These include labor markets and in some instances may include education, work experience and certifications. In addition to your pay, Target cares about and invests in you as a team member, so that you can take care of yourself and your family. Target offers eligible team members and their dependents comprehensive health benefits and programs, which may include medical, vision, dental, life insurance and more, to help you and your family take care of your whole selves. Other benefits for eligible team members include 401(k), employee discount, short term disability, long term disability, paid sick leave, paid national holidays, and paid vacation. Find competitive benefits from financial and education to well-being and beyond at https://corporate.target.com/careers/benefits.\nAbout us:\nWorking at Target means helping all families discover the joy of everyday life. We bring that vision to life through our values and culture. Learn more about Target here.\nAs aPrincipal Engineer supporting Threat Detection Operations, you set the technical strategy for the detection engineering, platforms, services, integrations, and automations that enable Target to detect cyber threats. You set direction for how these capabilities are designed, developed, tested, deployed, and operationalized across multiple portfolios and drive adoption across Target. You lead and approve engineering efforts to meet functional and non-functional requirements, including security, reliability, scalability, availability, performance, and maintainability.\nThis role combines principal-level engineering leadership with deep detection engineering expertise. You are expected to design, develop, and continuously improve scalable detection capabilities that identify sophisticated threats across complex environments, while applying strong investigative judgment to ensure detections are actionable, resilient, and aligned to evolving adversary behaviors. You translate threat intelligence, incident learnings, and emerging attack techniques into durable detection strategies, engineering solutions, and process improvements. You are a thought leader and mentor for detection engineers and partner teams and actively contribute to the broader cybersecurity team and tech organization.\nUse your skills, experience, and talents to be a part of groundbreaking thinking and visionary goals. As a Principal Engineer, Threat Detection Operations, you will take the lead as you...\nSet and communicate the technical vision, architecture, and roadmap for detection engineering, aligning threat detection capabilities with Target's cybersecurity priorities, business risks, threat landscape, and technical environments.\n\nArchitect and lead the development of scalable, reliable detection capabilities, services, integrations, and automations using Python, APIs, detection-as-code practices, event-driven patterns, and cloud-native technologies to identify malicious and anomalous activity across enterprise, cloud, identity, endpoint, network, and application environments.\n\nEstablish and drive engineering standards for detection content, source control, peer review, automated testing, CI/CD, release management, observability, documentation, versioning, access controls, and resilient production operations.\n\nLead the design, development, and lifecycle management of enterprise detection capabilities, including detection rules, behavioral analytics, correlation logic, detection pipelines, enrichment, alerting workflows, and analyst-facing tooling.\n\nProvide hands-on, principal-level leadership for complex detection and visibility challenges. Guide detection logic development, testing, tuning, validation, deployment, and continuous improvement to maximize detection effectiveness while reducing analyst workload.\n\nPartner with incident responders, threat hunters, threat intelligence, enterprise architecture, and technology teams to translate threat intelligence, adversary behaviors, investigative findings, and emerging risks into scalable and durable detection capabilities.\n\nAssess the viability, applicability, security, maintainability, and cost implications of detection technologies and technical solutions through proofs of concept, prototypes, architecture reviews, vendor evaluations, and build-versus-buy decisions.\n\nDefine metrics and feedback loops that measure detection coverage, fidelity, precision, reliability, time to detect, alert quality, operational performance, and analyst expertise; use the results to identify detection gaps and drive continuous improvement.\n\nInfluence telemetry and security data strategy by defining requirements for data quality, normalization, enrichment, retention, availability, and observability necessary to support effective and resilient detection capabilities.\n\nWork with engineering and cybersecurity leaders to build a high-performing team, provide technical leadership and coaching, mentor engineers and analysts, and participate in the selection and development of technical talent.\n\nCore responsibilities of this job are described within this job description. Job duties may change at any time due to business needs.\nAbout you:\n4-year degree or equivalent experience. Continuing education to maintain thorough knowledge of technical and cybersecurity domains while staying current with relevant technologies and threats.\n\n10+ years of experience in cybersecurity engineering, detection engineering, threat hunting, security operations, security analytics, or related services, including demonstrated ability to independently design, develop, validate, and improve detection capabilities in complex enterprise environments.\n\nAdvanced Python programming and software engineering skills, including APIs, data structures, testing, code review, source control, packaging, error handling, and maintainable documentation.\n\nDemonstrated experience designing, developing, testing, deploying, and operating detection content and supporting services through modern CI/CD, detection-as-code, and DevSecOps practices, including automated testing, secure deployment, monitoring, rollback, versioning, and change governance.\n\nStrong hands-on experience SIEM and security analytics platforms and the development of production-grade detection rules, correlation logic, behavioral analytics, enrichment, and alerting workflows. Familiarity with adjacent technologies such as EDR, SOAR, threat intelligence, identity, cloud security, network security, case management, and malware analysis.\n\nDeep knowledge of detection engineering principles and the ability to analyze endpoint, network, identity, cloud, application, and other security telemetry; understand adversary techniques and behaviors; identify detection opportunities and gaps; and develop high-fidelity detections that are effective, explainable, and operationally sustainable.\n\nStrong understanding of secure systems design and operations, including authentication and authorization, secrets management, logging and telemetry, data handling, resilience, failure recovery, and reliable production operations.\n\nDemonstrated success solving complex technical problems across more than one technical or functional area. Experience with REST APIs, SQL/NoSQL data stores, Git, PowerShell or Bash, containers/Kubernetes, cloud technologies, and large-scale security data platforms.\n\nUnderstands business fundamentals and how technology can support business goals, translate business and cyber risk into technical strategy, and evaluate financial and operational implications.\n\nProven leadership capabilities, influence, interpersonal skills, sound judgment, and calm decision-making in time-sensitive situations. Excellent verbal, written, and presentation skills to communicate complex technical and investigative findings clearly to technical teams, cybersecurity leaders, and business stakeholders.\n\nStrong team player with excellent planning and organizational skills and a demonstrated commitment to teamwork and team effectiveness.\n\nThis position will operate as a Hybrid /Flex for Your Day work arrangement based on Target’s needs. A Hybrid /Flex for Your Day work arrangement means the team member’s core role will need to be performed both onsite at the Target HQ MN location the role is assigned to and virtually, depending upon what your role, team and tasks require for that day. Work duties cannot be performed outside of the country of the primary work location, unless otherwise prescribed by Target. Click here if you are curious to learn more about Minnesota.\nBenefits Eligibility\nPlease paste this url into your preferred browser to learn about benefits eligibility for this role: https://tgt.biz/BenefitsForYou_FAmericans with Disabilities Act (ADA)\nIn compliance with state and federal laws, Target will make reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please reach out to -accommodation-relatedrequests, such as application follow-ups or technical issues, will not be addressed through this channel.","description_format":"text","description_chars":9266,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Life insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","E-commerce Platforms","Information Security","Online Groceries"],"lifecycle":[{"event":"open","at":"2026-09-18T01:08:20Z"}],"visa":[],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.422,"p_room":0.35,"age_days":27,"expected_fill_days":7,"reasons":["conf:19","velocity","win:tail","comp:brand"],"computed_at":"2026-10-14T06:34:16Z"},"pay":{"stated_usd_annual":303000,"is_top_pay":true},"html_url":"https://alion.io/job/target-principal-threat-detection-operations-engineer","json_url":"https://alion.io/job/target-principal-threat-detection-operations-engineer.json","meta":{"generated_at":"2026-10-14T19:48:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26101,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3684},"rest":"https://alion.io/mcp/rest/get_company?id=3684"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftarget-principal-threat-detection-operations-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftarget-principal-threat-detection-operations-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftarget-principal-threat-detection-operations-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/target-principal-threat-detection-operations-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftarget-principal-threat-detection-operations-engineer"}]}