Principal App Security Engineer - SSDLC & Automation

Roundel; Brooklyn Park (MN); Hybrid; USD 168,000 - 303,000; Full time

Benefits offered by this job

Health benefits

401(k)

Paid time off

Employee discount

Disability insurance

Paid vacation

Job summary

Target is seeking a Principal Application Security Engineer to lead our enterprise AppSec program from Minnesota. You will advance secure development practices, integrate security into the software lifecycle, and work with engineering teams to reduce risk through scalable solutions.

The role requires deep technical expertise, strategic thinking, and the ability to scale security across a large organization via automation, standardization, and self-service capabilities.

Qualifications

• BS/MS in CS, Info Security, or related field.
• 10+ years of software/security engineering experience.
• Demonstrated expertise across SSDLC, SAST/DAST/SCA, Threat Modeling, and Penetration Testing.
• Strong experience integrating security into CI/CD and DevSecOps workflows.
• Proven ability to influence technical direction without formal authority.
• Experience securing cloud-native applications (AWS, Azure, GCP).
• Experience leveraging AI/Generative AI in security workflows.

Responsibilities

• Provide technical leadership for the enterprise Application Security program.
• Advance secure development practices across the SDLC.
• Automate security tooling and integrate security into CI/CD pipelines.
• Partner with Security Architecture and cross-functional engineering teams.
• Define and track metrics; drive security maturity at scale.
• Mentor engineers and promote security best practices across teams.

Skills

SSDLC

SAST

DAST

SCA

Threat Modeling

Penetration Testing

Security Automation

CI/CD Pipelines

Cloud Security

Security Metrics

Education

BS/MS in Computer Science / Information Security / Engineering

Tools

Kubernetes

Containers

APIs

Microservices

Job description

Target is seeking a Principal Application Security Engineer to lead our enterprise AppSec program from Minnesota. You will advance secure development practices, integrate security into the software lifecycle, and work with engineering teams to reduce risk through scalable solutions.

The role requires deep technical expertise, strategic thinking, and the ability to scale security across a large organization via automation, standardization, and self-service capabilities.