Principal Application Security Engineer: AI & DevSecOps Leader

Relha LLC; Brooklyn Park (MN); Hybrid; USD 168,000 - 303,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Paid time off

Job summary

Target is seeking a Principal Application Security Engineer to lead our enterprise security program for applications. You will drive secure development practices, integrate security into the software lifecycle, and reduce risk with scalable security solutions across engineering teams.

You will guide SSDLC, SAST, DAST, SCA, threat modeling, and pen testing, while maturing automation in CI/CD pipelines and developer enablement. Hybrid work model in MN applies.

Qualifications

• BS/MS in Computer Science, Information Security, Engineering or equivalent.
• 10+ years in software engineering, application security or related roles.
• Expertise across SSDLC, SAST, DAST, SCA, Threat Modeling and Penetration Testing.
• Strong programming experience in one or more modern languages.
• Experience integrating security into CI/CD and DevSecOps workflows.
• Proven track record scaling Application Security programs.

Responsibilities

• Provide technical leadership for SSDLC and enterprise application security programs.
• Guide vulnerability remediation and secure coding practices across teams.
• Design automation to integrate security into CI/CD pipelines and workflows.
• Define the security roadmap, measure maturity, and drive improvements.
• Collaborate with security architecture and platform teams on controls.
• Mentor engineers and advocate secure development across the org.

Skills

SSDLC

SAST

DAST

SCA

Threat Modeling

Penetration Testing

CI/CD integration

DevSecOps

AI in security

Education

BS/MS in Computer Science, Info Security, Engineering

Job description

Target is seeking a Principal Application Security Engineer to lead our enterprise security program for applications. You will drive secure development practices, integrate security into the software lifecycle, and reduce risk with scalable security solutions across engineering teams.

You will guide SSDLC, SAST, DAST, SCA, threat modeling, and pen testing, while maturing automation in CI/CD pipelines and developer enablement. Hybrid work model in MN applies.