Lead Insider Threat Engineer — Protect Data & Trust

Roundel; Brooklyn Park (MN); Hybrid; USD 132,000 - 238,000; Full time

Job summary

Target is seeking a Lead Engineer – Insider Risk to protect enterprise data, safeguard systems, and deter insider threats through innovative analytics and program leadership.

You will design and implement Insider Threat and DLP programs, define metrics, and collaborate with Cyber Fusion Center teams to strengthen security across the organization. This role offers flexibility with Remote or Hybrid work arrangements.

Qualifications

• 4 year degree or equivalent experience.
• 7+ years in cybersecurity focusing on Incident Response, DLP, and Insider Threat.
• Extensive experience with DLP tools (ZScaler, ForcePoint, Symantec).
• Deep understanding of Insider Threat methodologies and analytics.
• Proficiency in Python, PowerShell or equivalent.
• Ability to build strong cross-functional partnerships and influence enterprise security strategy.

Responsibilities

• Monitor, investigate and maintain DLP technologies across endpoints, network sensors, cloud platforms, and email systems.
• Conduct root cause analysis, recommend remediation actions, and institute blocking procedures as needed to prevent similar risk moving forward.
• Integrate DLP tools with SIEM, UEBA, CASB, and endpoint detection platforms.
• Conduct continuous improvement of custom rules based on tradecraft knowledge, anomaly detection hunts, threat intelligence, and previous cases.
• Work closely with Employee Relations, Human Resources, Security Architecture, and policy teams to improve Target’s overall security posture and move from detection to prevention.

Skills

Python/PowerShell scripting

SIEM/UEBA/EDR experience

Insider Threat/DLP knowledge

Strong communication

Education

Bachelor's degree or equivalent

Tools

DLP tools (ZScaler, ForcePoint, Symantec)

Job description

Target is seeking a Lead Engineer – Insider Risk to protect enterprise data, safeguard systems, and deter insider threats through innovative analytics and program leadership.

You will design and implement Insider Threat and DLP programs, define metrics, and collaborate with Cyber Fusion Center teams to strengthen security across the organization. This role offers flexibility with Remote or Hybrid work arrangements.