Senior Cloud Security Platform Lead (CSPM/CNAPP)

Roundel; Brooklyn Park (MN); Hybrid; USD 132,000 - 238,000; Full time

Benefits offered by this job

Health benefits

401(k)

Employee discount

Paid time off

Job summary

Target is seeking a Lead Engineer - Cloud Security to own the Cloud Security Platform and CSPM across our cloud environments. You will drive architecture, tuning, onboarding of new accounts, and operator readiness, delivering secure, scalable posture management and automation for developers.

You will influence policy and tooling, partner with multiple security and engineering teams, and own the end-to-end lifecycle from problem framing to steady-state operation. Hybrid work in MN is expected.

Qualifications

• 4-year degree OR equivalent work experience.
• 7+ years of hands-on experience in technology with cloud security and platform engineering.
• Experience deploying, operating, and tuning a CSPM/CNAPP platform in a large multi-cloud environment.

Responsibilities

• Serve as the senior technical lead and hands-on owner of Target's Cloud Security Platform and CSPM capability.
• Own end-to-end engineering, deployment, configuration, tuning, and ongoing operation of CSPM/CNAPP across public and private clouds.
• Operate the platform as a production system with clear SLOs and on-call participation.
• Define CSPM policy set end-to-end, grounded in reference architecture and secure benchmarks.
• Drive platform roadmap, build-vs-buy decisions, and developer-focused automation.

Skills

Cloud security

CSPM

Kubernetes

Terraform

CI/CD

Python or Go

On-call / SLOs

Education

Bachelor's degree or equivalent

Tools

Rego

SIEM/SOAR integration

Job description

Target is seeking a Lead Engineer - Cloud Security to own the Cloud Security Platform and CSPM across our cloud environments. You will drive architecture, tuning, onboarding of new accounts, and operator readiness, delivering secure, scalable posture management and automation for developers.

You will influence policy and tooling, partner with multiple security and engineering teams, and own the end-to-end lifecycle from problem framing to steady-state operation. Hybrid work in MN is expected.