Principal Engineer, Application Security

Target

Confirmed live today High trust
Closes in 3 days Hybrid

Quick summary

Work type
Hybrid
Location
Brooklyn Park, MN
Salary
$168,000–$303,000 / yr
Employment
Full-time
Posted
32 days ago
Freshness
Confirmed live today
Closes
Oct 30, 2026 (soon)

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $190k
This role $236k
$124k $322k
below market most similar roles pay here above market

This role pays more than 83% of similar roles. Most pay $159,750–$219,362 — the blue band above. At the midpoint, this role pays about $236k versus about $190k for comparable roles.

Based on 240 similar postings.

Employer

About Target

Target Corporation is a large-format general merchandise and grocery retailer offering a wide assortment of everyday essentials, apparel, home goods, and electronics through stores and online. Industry: General Merchandise Retail

Target currently has 92 open roles on FindRole.

Listed pay typically runs $98,000–$176,000 across 67 roles with salary data.

Most-posted roles

View all roles at Target

At a glance

TL;DR · Principal Engineer, Application Security

The Principal Engineer - Application Security provides technical leadership for the enterprise Application Security program. This role involves advancing secure development practices by integrating security into the software development lifecycle and partnering with engineering teams to reduce risk through scalable solutions. Key responsibilities include performing Threat Modeling, Penetration Testing, SAST, DAST, and SCA while building automation for CI/CD pipelines. The position requires developing tooling, APIs, and leveraging AI and generative AI technologies to enhance vulnerability detection and developer enablement. Candidates must possess expertise in modern programming languages, cloud-native platforms like AWS, Azure, or Google Cloud, and architectures involving Kubernetes, containers, and microservices. The role solves complex security challenges by establishing technical roadmaps, standardizing security controls, and managing software supply chain security across a large engineering organization.

What you'll do

  • Provide technical leadership across the Secure Software Development Lifecycle (SSDLC) and various security testing methodologies.
  • Design and build automation to integrate security seamlessly into CI/CD pipelines and modern development workflows.
  • Develop custom tooling, APIs, and self-service capabilities to improve developer experience and reduce manual effort.
  • Identify and implement opportunities to leverage AI and generative AI technologies for vulnerability detection and remediation.
  • Define the technical roadmap and strategies for the enterprise Application Security program.
  • Guide engineering teams in vulnerability remediation, secure coding best practices, and threat modeling.
  • Establish and track metrics to measure program effectiveness and continuously improve security maturity.
  • Solve complex security challenges involving cloud-native platforms, Kubernetes, containers, and microservices architectures.

What we're looking for

  • BS/MS in Computer Science, Information Security, Engineering, or equivalent industry work experience.
  • 10+ years of experience in software engineering, application security, or related security engineering roles.
  • Demonstrated expertise across SSDLC, SAST, DAST, SCA, Threat Modeling, and Penetration Testing.
  • Strong software development experience in one or more modern programming languages.
  • Experience integrating security into modern CI/CD pipelines and DevSecOps workflows.
  • Proven experience building and scaling Application Security programs across large engineering organizations.
  • Experience securing cloud-native applications in AWS, Azure, or Google Cloud.
  • Experience with Kubernetes, containers, APIs, microservices, and software supply chain security.
  • Experience leveraging AI and Generative AI technologies to improve engineering productivity or security operations.
  • Industry certifications such as CISSP, CSSLP, GIAC, OSCP, or cloud security certifications (preferred).

More like this

Similar roles

DevSecOps Engineer Principal

General Dynamics

Remote (Falls Church, VA) 47 days ago $144,500–$195,500
AWS Amazon EKS GitLab CI/CD OpenTofu MLOps AIOps FedRAMP Infrastructure as Code Linux NIST 800-53 Prisma Cloud Wiz Aqua Trivy Snyk Prometheus Grafana CloudWatch Splunk Vector Databases Zero Trust IAM
5+ yrs exp Remote

Principal Security Software Engineer

Apple Inc

Seattle, WA 7 days ago $205,400–$374,300
Cloud Security Network Security Application Security Python Go Java infrastructure-as-code DevSecOps AWS GCP Azure Threat Modeling Vulnerability Management Security Architecture Secure Coding GDPR PCI-DSS HIPAA
10+ yrs exp

Principal Platform Security Engineer

Early Warning Services

Scottsdale, AZ +2 26 days ago
AWS Azure GCP Threat Modeling Architectural Risk Analysis Platform Security Security Engineering Automation Reference Architecture Risk Management
10+ yrs exp Hybrid

Principal Platform Security Engineer

Early Warning Services

Scottsdale, AZ +3 28 days ago
Platform Security Cloud Strategy Secure-by-Default Reference Architectures Design Patterns Scalable Automation Risk Management Security Engineering Platform Modernization Shared Services Technical Standards Control Strategy Lifecycle Controls
10+ yrs exp Hybrid

Principal AI Security Engineer

Micron Technology

Boise, ID 4 days ago
Python AI Security LLM APIs Data Pipelines DLP Identity and Access Management Model Context Protocol MCP Adversarial ML MITRE ATLAS OWASP LLM Guidance NIST Cybersecurity Framework Incident Response Security Engineering Network Security Endpoint Protection
8+ yrs exp