Lead Engineer – Cloud Security, Cloud Security Platform, CSPM

Target

. Serve as senior technical lead and hands-on owner of Target's Cloud Security Platform and CSPM capability .

Posted 10/30/2026full-timeBrooklyn Park • Minnesota • United StatesSenior💰 $132,000 - $238,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Cloud Security Platform Management, including CSPM and CNAPP capabilities, with a strong focus on automation, policy tuning, and integration with enterprise systems. Proven ability to lead technical direction, manage multi-cloud environments, and mentor engineering teams while ensuring operational excellence and security best practices.

Highest-signal resume keywords

Cloud SecurityCSPM/CNAPP Platform ManagementKubernetesInfrastructure As Code (IaC)Automation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud SecurityCSPMCNAPPKubernetesInfrastructure As CodeTerraformPolicy-As-CodePythonGoSecurity Management Workflows

Soft Skills

Excellent CommunicationPresentation SkillsCuriosityBias For ActionBuilder's Mindset

Tools & Technologies

GCPAWSAzureSIEMSOARCI/CDRemediation PlatformsGovernance SystemsAdmission Controller FrameworksEnterprise Telemetry

Certifications & Qualifications

4-Year DegreeISO/IEC 27001NISTCIS Benchmarks

Industry Keywords

Cloud Security Best PracticesThreat LandscapeSecurity FrameworksOperational HealthMulti-Cloud Environment

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformKubernetesPythonTerraformGo

About the role

Key responsibilities & impact

Serve as senior technical lead and hands-on owner of Target's Cloud Security Platform and CSPM capability
Set technical direction, standards, and roadmap for the platform
Engineer, deploy, configure, tune, and operate the CSPM/CNAPP platform across public and private cloud environments
Onboard cloud accounts, projects, and workloads
Implement and operate core controls, including RBAC and SSO
Own platform availability, performance, observability, capacity, upgrades, SLOs, and outage response
Own the CSPM policy set, including rule enablement, tuning, suppression, and rationale
Design the CSPM and CNAPP findings pipeline with Cloud Security software developers
Aggregate, deduplicate, enrich, attribute ownership, and deliver findings to enterprise remediation dashboards with SLAs
Reduce noise and false positives
Extend platform capabilities to workload, container/image, cloud identity/entitlement, and IaC posture
Partner with Detection & Response on detections and cloud incident response
Drive multi-quarter initiatives from scoping and design through rollout, adoption, and operation
Make build-vs-buy decisions and manage tool evaluations, integrations, and vendor input
Develop automation, self-service, paved roads, and developer-friendly controls
Reduce operational toil and improve developer experience
Manage exception handling, governance workflows, and platform adoption across Target Tech
Integrate cloud security telemetry with enterprise SIEM/SOAR and remediation/governance systems
Partner with Cloud Platform, Identity Security, Network Security, Data Security, Detection & Response, Vulnerability Management, BISO, and product engineering teams
Present roadmap, risk reduction, operational health, and tradeoffs to senior leadership and staff engineers
Mentor engineers and raise standards for code quality, testing, reviews, on-call hygiene, postmortems, and operational excellence

Requirements

What you’ll need

4-year degree OR equivalent work experience
7+ years of hands-on experience in technology
Deep experience in cloud security, cloud platform engineering, CSPM, Kubernetes, IaC/CI-CD, automation, identity, and detection/response integration
Experience as a senior IC or tech lead owning a security or platform capability end-to-end at enterprise scale
Experience deploying, operating, and tuning a CSPM or CNAPP platform in a large multi-cloud environment
Experience with CSPM policy tuning, suppression discipline, ownership attribution, and SLA-based remediation
Experience running production platforms with SLOs, on-call coverage, change management, and continuous-improvement loops
Experience driving multi-quarter roadmaps from problem framing through rollout, adoption, and steady-state operation
Experience making and defending build-vs-buy decisions
Hands-on experience with public cloud; GCP preferred, AWS/Azure valued
Experience with private cloud and Kubernetes environments at enterprise scale
Working knowledge of Kubernetes and admission controller frameworks
Strong working knowledge of infrastructure as code, including Terraform or equivalent
Working knowledge of policy-as-code, such as Rego
Familiarity integrating policy and posture signal into CI/CD
Experience building and operating findings pipelines integrated with enterprise remediation/governance platforms
Experience integrating cloud telemetry into enterprise SIEM/SOAR pipelines
Experience integrating security tooling with CI/CD, source control, and ticketing workflows
Understanding of secure software development, network security fundamentals, and modern cloud-native architectures
Understanding of AI/ML and related security considerations
Fluency in at least one general-purpose language, such as Python or Go
Strong understanding of security management workflows, threat landscape, security frameworks, standards, and cloud security best practices
Working knowledge of NIST, CIS Benchmarks, and ISO/IEC 27001
Excellent written and verbal communication and presentation skills
Demonstrated curiosity, bias for action, and builder's mindset

Benefits

Comp & perks

Comprehensive health benefits, which may include medical, vision, dental, and life insurance
401(k)
Employee discount
Short-term disability
Long-term disability
Paid sick leave
Paid national holidays
Paid vacation
Financial, education, and well-being benefits and programs
Remote work arrangement with work-from-home or alternate-location flexibility
Remote team members may travel to headquarters up to 4 times a year