Lead Engineer – Cloud Security (Security Governance)

The pay range is $132,000.00 - $238,000.00

Pay is based on several factors which vary based on position. These include labor markets and in some instances may include education, work experience and certifications. In addition to your pay, Target cares about and invests in you as a team member, so that you can take care of yourself and your family. Target offers eligible team members and their dependents comprehensive health benefits and programs, which may include medical, vision, dental, life insurance and more, to help you and your family take care of your whole selves. Other benefits for eligible team members include 401(k), employee discount, short term disability, long term disability, paid sick leave, paid national holidays, and paid vacation. Find competitive benefits from financial and education to well-being and beyond at https://corporate.target.com/careers/benefits .

Working at Target means helping all families discover the joy of everyday life. We bring that vision to life through our values and culture. Learn more about Target here. Target is one of the world's most recognized brands and one of America's leading retailers. But behind the brand our guests love, is a culture of continual innovation and right now, we are up to big things! Target's security team is a place where innovation happens daily. Interested in a culture that combines ongoing learning, engineering excellence, and stellar outcomes? We are too – that's why we work here. Join our team to improve Target's security and move the business forward.

As a Lead Engineer on the Cloud Security team, you'll be the senior technical owner of the engineering workflows and services that make cloud security governance practical at Target scale. You'll help teams understand security requirements, onboard to Cloud Security capabilities, adopt usable controls, and move findings and exception requests through clear, evidence-based processes. You'll build the automation and operational mechanisms that connect security intent with accountable decisions and action.

Beyond deep technical expertise, you have a strong bias for action and a builder's mindset. Cloud security governance sits between security requirements, the capabilities that enforce them, and the product and platform teams who need to use them. You are comfortable operating in that realm – translating approved requirements into clear workflows, engineering reliable onboarding and exception-management capabilities, improving adoption through evidence and feedback, and partnering with decision owners so risks are reviewed and handled consistently. You have the engineering credibility to set technical direction for other engineers as a hands-on IC, and the communication and partnership skills to make governance work well across Target.

Expect to:

• Serve as the senior technical lead and hands-on owner of Cloud Security governance engineering — setting technical direction, standards, and a roadmap for the workflows, integrations, and automation that other engineers and partners use.
• Design, build, and operate a consistent lifecycle for cloud security exceptions: intake, completeness checks, control and asset context, risk and impact information, compensating controls, accountable decision owner, review date, expiry or renewal, and closure evidence.
• Make exception requests traceable and decision-ready. Route them to the appropriate policy, architecture, business, or risk-acceptance authority; track decisions and conditions; and escalate overdue or incomplete requests through agreed paths. This role enables and records decisions but does not independently approve policy deviations or accept risk.
• Engineer workflows that connect security findings, control requirements, exceptions, remediation ownership, service-level expectations, and closure evidence to the agreed enterprise governance and remediation systems.
• Lead onboarding and adoption of Cloud Security capabilities across eligible cloud accounts, projects, workloads, and engineering teams. Partner with platform and software engineers to define practical entry criteria, steps, ownership, enablement materials, support paths, and feedback loops.
• Treat onboarding and governance as products: reduce friction and one-off coordination through clear guidance, self-service, automation, reusable patterns, and well-defined service interfaces.
• Work with Security Architecture and domain owners to translate approved standards, control requirements, and policy changes into understandable guidance, implementation handoffs, evidence expectations, and governance workflows. Security Architecture and designated authorities retain policy and formal risk decisions.
• Establish transparent reporting for adoption, coverage, exception quality and age, review and expiry status, finding ownership, remediation progress, and workflow health. Agree populations, definitions, owners, and baselines before proposing targets; distinguish security outcomes from process and service-health measures.
• Improve the quality and usability of governance data by partnering with Cloud Security platform and software engineers, ITDP, service owners, and enterprise workflow owners on asset attribution, ownership, severity, business context, and status feedback.
• Build integrations and automation for intake, routing, notifications, evidence capture, status synchronization, and reporting. Use existing enterprise capabilities where they meet the need; make pragmatic build-vs-buy recommendations where they do not.
• Operate governance services as production capabilities: own availability, performance, observability, capacity, change and release practices, failure handling, and on-call participation as appropriate. Establish service objectives for workflow reliability, completeness, and timeliness with stakeholders.
• Partner closely with the Cloud Security platform and software engineers so policy enforcement, findings, onboarding, exceptions, and remediation operate as a coherent end-to-end experience for engineering teams.
• Partner with Security Architecture, BISO/governance, Identity, Network, Data Protection, SecOps/Detection & Response, Vulnerability Management, ITDP, and product, platform, and service owners to clarify responsibilities, decision paths, service interfaces, and operational handoffs.
• Support audit, assurance, and leadership reviews by making approved control requirements, exception decisions, evidence, ownership, and remediation status discoverable and reliable. Do not represent working proposals, incomplete evidence, or candidate measures as approved policy or established compliance.
• Drive multi-quarter initiatives end-to-end: from problem framing and scoping, through design, build, rollout, adoption, and steady-state operation.
• Represent governance capability clearly to senior leadership and staff engineers alike: risk themes, adoption barriers, exception trends, decision needs, workflow health, and tradeoffs — in language tuned to the audience.
• Mentor other engineers on the team on security governance engineering, workflow automation, control evidence, and operational practices, and raise the bar for code quality, testing, code review, on-call hygiene, postmortems, and operational excellence.
• Continuously reduce toil for both the Cloud Security team and Target's engineering organization — fewer unclear requests, repeated approvals, manual status chases, and one-off onboarding paths; more consistent decisions, self-service, and timely feedback.

Core responsibilities are described within this job description. Job duties may change at any time due to business needs.

About You:

• 4-year degree OR equivalent work experience
• 7+ years of hands-on experience in technology, security engineering, platform engineering, or a related discipline, including experience building or operating capabilities in a large, complex organization

…