Senior SIEM & Log Ingestion Engineer

Target; Brooklyn Park (MN); Hybrid; USD 98,000 - 176,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Employee discount

Disability insurance (short/long)

Paid sick leave

Paid national holidays

Paid vacation

Job summary

Target is seeking a Senior SIEM Engineer to own end-to-end log ingestion into Google SecOps (Chronicle), from source onboarding through reliable shipment, enabling downstream teams to power search, alerting, enrichment, and investigations.

You will design scalable ingestion pipelines and data validation, collaborate across Threat Management Engineering, Threat Detection & Operations, and CSIRT, and drive 24/7 on-call coverage with automation and runbooks to prevent incidents.

Qualifications

• 4-year degree in Computer Science (or related field) or equivalent practical experience.
• 3+ years of software development and/or platform engineering experience.
• Proven track record building and operating systems in a cloud environment (public cloud required).
• Proficiency in Python.
• Proficiency with regular expressions for parsing, extraction, and validation.
• Experience integrating systems using APIs (including authentication/authorization concepts).
• Experience ingesting, transforming, and validating log/event data across standard and non-standard formats (e.g., JSON, Syslog, CEF, CSV/TSV), including schema changes and backwards compatibility.
• Demonstrated troubleshooting and root‑cause analysis skills in production environments, including follow‑through on preventative fixes (monitoring, runbooks, automation).
• Understanding of distributed systems fundamentals and common resilience patterns (timeouts, retries, idempotency).
• Experience migrating services or data flows between provider platforms (e.g., on‑prem cloud).
• Willingness to participate in a shared 24/7 on‑call rotation.

Responsibilities

• Own and improve end-to-end log ingestion into Google SecOps (formerly Chronicle)—from source onboarding through reliable shipment—so downstream teams can power search, alerting, enrichment, and investigations.
• Design and deliver scalable improvements to ingestion pipelines, integrations, and data validation, including feed health signals, shipment validations, and other meta-attributes that ensure end-to-end feed reliability.
• Partner with and build strong working relationships across Threat Management Engineering, Threat Detection & Operations, Cyber Threat Intelligence, and CSIRT to deliver high-quality, backward-compatible changes to large-volume, high-criticality data feeds and SecOps integrations.
• Lead troubleshooting and root-cause analysis across log pipelines and SIEM integrations (including other SIEM platforms) as part of a shared 24/7 on‑call rotation; implement preventative mechanisms through monitoring, runbooks, and automation.
• Build and enhance ingestion integrations and operational tooling using Python and regular expressions for parsing, validation, transformations, and schema evolution across standard and non‑standard formats (e.g., JSON, Syslog, CEF, CSV/TSV).
• Develop monitoring and alerting aligned to platform SLOs/SLAs, improving completeness, timeliness, and quality while reducing incident recurrence and MTTR.
• Collaborate across teams to prioritize work, unblock partners, and continuously improve telemetry quality and platform performance.

Skills

Python

Regular expressions

APIs integration

Log/event data parsing

Distributed systems

On-call rotation

Cloud platforms

Education

4-year degree in Computer Science

Tools

Public Cloud

Job description

Target is seeking a Senior SIEM Engineer to own end-to-end log ingestion into Google SecOps (Chronicle), from source onboarding through reliable shipment, enabling downstream teams to power search, alerting, enrichment, and investigations.

You will design scalable ingestion pipelines and data validation, collaborate across Threat Management Engineering, Threat Detection & Operations, and CSIRT, and drive 24/7 on-call coverage with automation and runbooks to prevent incidents.