Principal Engineer, Cybersecurity Incident Response

Target

Confirmed live today High trust

Hybrid

Quick summary

Work type: Hybrid
Location: Brooklyn Park, MN
Employment: Full-time
Posted: 63 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

How this pay compares to similar roles

Similar $196k

$129k $275k

below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $174,600–$216,696.

Based on 240 similar postings.

Employer

About Target

Target Corporation is a large-format general merchandise and grocery retailer offering a wide assortment of everyday essentials, apparel, home goods, and electronics through stores and online. Industry: General Merchandise Retail

Target currently has 92 open roles on FindRole.

Listed pay typically runs $98,000–$176,000 across 67 roles with salary data.

Most-posted roles

View all roles at Target

At a glance

TL;DR · Principal Engineer, Cybersecurity Incident Response

Role Posting Log in to save

JOB TITLE: Principal Engineer - Cybersecurity Incident Response As a Principal Engineer supporting Cybersecurity Incident Response, you will set the technical strategy for engineering platforms, services, integrations, and automations that enable the investigation and response to cyber threats. You will architect and lead the development of secure, reliable services using Python, APIs, event-driven patterns, and cloud-native technologies to accelerate triage, evidence collection, and recovery. Your daily work involves leading complex cyber investigations as a principal analyst while translating lessons learned into durable technology improvements. You will manage SecOps and SOAR capabilities, including production-grade playbooks and agentic AI-powered analysis tooling. Key technical requirements include experience with CI/CD, DevSecOps, SQL/NoSQL data stores, Git, PowerShell, Bash, and Kubernetes to solve complex problems across endpoint, cloud, identity, and network environments.

What does a Engineer earn in Minnesota?

Median $137000 from 37 postings across 5 companies.

See salary data

Skills

Python SOAR SIEM CI/CD DevSecOps Kubernetes REST APIs SQL NoSQL Git PowerShell Bash EDR Cloud Security Secrets Management Digital Forensics Agentic AI Observability Source Control

What you'll do

Set the technical vision, architecture, and roadmap for incident response engineering and security operations.
Architect and develop secure services and automations using Python, APIs, and cloud-native technologies.
Establish engineering standards for CI/CD, source control, automated testing, and secrets management.
Lead the design and lifecycle management of SOAR capabilities and production-grade playbooks.
Provide hands-on incident commander support by leading complex, high-severity cyber investigations.
Build scalable live-response and forensic artifact collection solutions across cloud and endpoint environments.
Develop agentic AI-powered analysis tooling to automate repetitive investigative tasks and correlate telemetry.
Mentor engineers and analysts while providing technical leadership to build a high-performing team.

What we're looking for

4-year degree or equivalent experience.
10+ years of experience in technology development, cybersecurity engineering, security operations, or related services.
10+ years of hands-on cybersecurity incident response experience, including the ability to independently lead active enterprise investigations.
Advanced Python programming and software engineering skills, including APIs, data structures, testing, code review, and source control.
Demonstrated experience designing and operating automation through modern CI/CD and DevSecOps practices.
Strong hands-on experience with SOAR platforms (SecOps preferred) and development of production-grade playbooks, integrations, and workflows.
Deep knowledge of the incident response lifecycle and ability to analyze endpoint, network, identity, cloud, and file-based evidence.
Experience with REST APIs, SQL/NoSQL data stores, Git, PowerShell or Bash, containers/Kubernetes, and cloud technologies.

Similar roles

Principal Security Engineer, Incident Response

F5 Inc

Seattle +1 15 days ago $182,200–$273,200

Incident Response Cybersecurity AWS Azure GCP Kubernetes SIEM EDR CrowdStrike WAF WAAP API Gateway DDoS Mitigation FedRAMP NIST SP 800-61 ISO 27001 SOC 2 PCI-DSS MITRE ATT&CK Digital Forensics Load Balancing NGINX BIG-IP

10+ yrs exp Hybrid

Save

Principal Cybersecurity Engineer

Leidos

McLean, VA +1 12 days ago $131,300–$237,350

Splunk HBSS Trellix Carbon Black EDR DevSecOps CI/CD Python PowerShell AWS Oracle Cloud Google Cloud Platform Ansible CloudFormation Rapid7 Tenable Nessus SonarQube Fortify Linux Red Hat IDS/IPS SIEM RMF STIG Cryptography

10+ yrs exp

Save

Principal Cybersecurity Engineer

Leidos

Adelphi, MD 56 days ago $131,300–$237,350

Cybersecurity Architecture hybrid-cloud Multi-Cloud NIST FISMA FedRAMP Security Operations Center (SOC) Incident Response Vulnerability Management Threat Detection Systems Engineering Agile CISSP CISM CCISO GSLC

10+ yrs exp Hybrid

Save

Principal Threat Detection Operations Engineer

Target

Brooklyn Park, MN 40 days ago $168,000–$303,000

Python Detection-as-Code CI/CD DevSecOps APIs Kubernetes SQL NoSQL Git PowerShell Bash SIEM EDR SOAR Cloud Security REST APIs Containers Observability Threat Intelligence Security Analytics

10+ yrs exp Hybrid

Save

Principal Engineer, Cybersecurity

T-Mobile

Bellevue, WA 10 days ago $166,300–$224,900

Penetration Testing Ghidra IDA Pro BurpSuite Nmap Hashcat OllyDbg Python C++ C# PHP Shell Scripting 4G LTE 5G Digital Forensics Threat Modeling Security Automation AI

7+ yrs exp

Save

Cybersecurity Engineer Principal

General Dynamics

Bossier City, LA 91 days ago $146,200–$197,800

SIEM SOAR EDR Python PowerShell Bash Splunk Microsoft Sentinel IBM QRadar CrowdStrike Falcon Defender for Endpoint SentinelOne Qualys Tenable Rapid7 AWS Azure GCP Active Directory IAM PKI NIST 800-53 FISMA DISA STIGs CIS Benchmarks MITRE ATT&CK REST APIs Linux Windows Server Red Hat Rocky Ubuntu Amazon Linux

8+ yrs exp Hybrid

Save