{"id":1085750,"url":"https://alion.io/job/target-sr-engineer-pen-tester","title":"Sr. Engineer – Pen Tester","company":{"id":3684,"name":"Target","domain":"target.com","url":"https://alion.io/company/target","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":92,"open_postings":392,"ghost_share":0.018,"stale_share":0.474,"repost_share":0.036,"time_to_fill_p50_days":9,"computed_at":"2026-11-08T05:47:12Z"}},"role":"QA","role_family":"QA","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":6500,"max_usd":17000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":35},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"DNS","optional":false},{"name":"Docker","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"Ruby","optional":false},{"name":"Slack","optional":false},{"name":"SOC 2","optional":false},{"name":"TCP/IP","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-09-21T08:46:48Z","employer_posted_date":"2026-09-21","last_verified_at":"2026-11-08T13:17:11Z","board_verified":true,"closed_at":null,"days_open":48,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":48},"description":"About us:\nWorking at Target means helping all families discover the joy of everyday life. We bring that vision to life through our values and culture. Learn more about Target here.\nPosition Overview\nThe Penetration Tester is a critical member of the Application Security team, focused on identifying, validating, and resolving security vulnerabilities across our cloud infrastructure and applications. You will lead technical security assessments, including application-layer and network-layer penetration testing, to ensure all information assets are secured against evolving threats. This role is vital for maintaining our security posture and ensuring remediation efforts are effectively prioritized and executed.\nKey Responsibilities\nPerform comprehensive manual and automated application-layer penetration tests to identify vulnerabilities, adhering to industry standards and internal methodologies.\nConduct network-layer penetration tests encompassing all components supporting network functions and operating systems.\nValidate segmentation and scope-reduction controls at least annually and after any significant changes to ensure isolation of the Cardholder Data Environment (CDE).\nTriage and validate vulnerabilities reported through bug bounty program.\nDocument and risk-rate all findings, providing actionable remediation guidance to engineering and product teams.\nVerify the correction of exploitable vulnerabilities through re-testing and post-remediation assessments.\nCollaborate with external 3rd party security firms on penetration testing and threat hunting exercises.\nEnsure all security assessments and remediation activities meet compliance and regulatory obligations (e.g., PCI DSS, SOC).\nQualifications\nMinimum of 4+ years of hands-on experience in penetration testing, ethical hacking, or application security engineering.\nDeep understanding of common web-based attacks (SQLi, XSS, CSRF, XXE, etc.) and how to mitigate them at the application level.\nProficiency in scripting or programming languages such as Python, Go, Ruby, or Bash to automate security tasks.\nComprehensive knowledge of network protocols and security concepts, including TCP/IP, DNS, HTTP/S, TLS, and IPSEC.\nStrong experience with security testing tools (e.g., BurpSuite Enterprise, SAST, DAST, and IAST).\nWorking knowledge of OWASP security fundamentals and API identity/access management (OAuth 2.0, OIDC, JWT).\nAbility to work with high autonomy and communicate technical security findings clearly to both technical and non-technical audiences.\nRelevant information security certification(s) such as OSCP, CEH, OSWE, or CISSP.\nBonus Qualifications\nDirect experience managing or triaging a public bug bounty program (e.g., HackerOne, BugCrowd).\nExperience leveraging Slack/ChatOps to automate security tasks or reporting.\nExperience with cloud orchestration and Infrastructure as Code (e.g., Terraform, Google Deployment Manager).\nFamiliarity with containerization and orchestration tooling like Docker and Kubernetes.\nKnowledge of compliance frameworks such as ISO 27001, PCI DSS, SOC2, or CCPA.","description_format":"text","description_chars":3090,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["E-commerce Platforms","Online Groceries"],"lifecycle":[{"event":"open","at":"2026-09-21T08:46:48Z"}],"visa":[],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.374,"p_room":0.28,"age_days":47,"expected_fill_days":9,"reasons":["conf:9","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/target-sr-engineer-pen-tester","json_url":"https://alion.io/job/target-sr-engineer-pen-tester.json","meta":{"generated_at":"2026-11-08T18:11:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":38088,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3684},"rest":"https://alion.io/mcp/rest/get_company?id=3684"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftarget-sr-engineer-pen-tester"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftarget-sr-engineer-pen-tester"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftarget-sr-engineer-pen-tester"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/target-sr-engineer-pen-tester\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftarget-sr-engineer-pen-tester"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1085750}},{"tool":"search_jobs","arguments":{"company":"target.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1085750},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}