Principal Engineer, Cybersecurity Incident Response

Target

Confirmed live yesterday High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Brooklyn Park, MN
Salary
$168,000–$303,000 / yr
Posted
17 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $191k
This role $236k
$111k most similar roles pay here $324k

This role pays more than 89% of similar roles. Most pay $171,750–$210,012 — the shaded band above. At the midpoint, this role pays about $236k versus about $191k for comparable roles.

Based on 240 similar postings.

Employer

About Target

Target Corporation is a large-format general merchandise and grocery retailer offering a wide assortment of everyday essentials, apparel, home goods, and electronics through stores and online. Industry: General Merchandise Retail

Target currently has 58 open roles on FindRole.

Listed pay typically runs $98,000–$176,000 across 58 roles with salary data.

Most-posted roles

View all roles at Target

At a glance

TL;DR · Principal Engineer, Cybersecurity Incident Response

As a Principal Engineer - Cybersecurity Incident Response, you will set the technical strategy for engineering platforms, services, integrations, and automations that enable the organization to investigate and respond to cyber threats. You will architect and lead the development of secure, reliable services using Python, APIs, event-driven patterns, and cloud-native technologies to accelerate triage, evidence collection, and containment. Your daily work involves building production-grade SOAR playbooks, designing agentic AI-powered analysis tools, and developing automated forensic artifact collection solutions across endpoint, cloud, and network environments. You will also provide hands-on incident commander support during high-severity investigations while mentoring engineers on CI/CD, DevSecOps practices, and secure systems design. The role focuses on solving complex security challenges by translating investigative requirements into scalable technical capabilities within a sophisticated cybersecurity infrastructure to ensure operational resilience and rapid threat mitigation.

What does a Engineer earn?

Median $185000 from 249 postings across 48 companies.

See salary data

What you'll do

  • Set the technical vision, architecture, and roadmap for incident response engineering and automation platforms.
  • Architect and develop secure services using Python, APIs, and cloud-native technologies to accelerate threat investigation.
  • Establish engineering standards for CI/CD, source control, automated testing, and secure infrastructure management.
  • Lead high-severity cyber investigations as a hands-on incident commander to guide triage, containment, and recovery.
  • Develop and manage SOAR capabilities, including production-grade playbooks and case-management workflows.
  • Design and operationalize agentic AI-powered tools to automate repetitive tasks and correlate forensic evidence.
  • Build scalable live-response solutions for collecting volatile and persistent evidence across cloud and network environments.
  • Mentor engineers and analysts while providing technical leadership to build a high-performing cybersecurity team.

What we're looking for

  • A 4-year degree or equivalent experience is required.
  • 10+ years of experience in technology development, cybersecurity engineering, security operations, or related services.
  • 10+ years of hands-on cybersecurity incident response experience including the ability to lead active enterprise investigations.
  • Advanced Python programming and software engineering skills including APIs, data structures, testing, and source control.
  • Experience designing and operating automation through modern CI/CD and DevSecOps practices.
  • Strong hands-on experience with SOAR platforms (SecOps preferred).
  • Deep knowledge of the incident response lifecycle and ability to analyze endpoint, network, identity, cloud, and file-based evidence.
  • Proficiency with REST APIs, SQL/NoSQL data stores, Git, PowerShell or Bash, containers/Kubernetes, and cloud technologies.

More like this

Similar roles

Principal Software Engineer

Autodesk

Atlanta, GA 29 days ago $139,000$249,260
Distributed Systems Data Pipelines NoSQL Serverless API Design ETL Cloud Platform Schema Validation Search Relevance
8+ yrs exp Hybrid

Principal Software Engineer

CVS Health

Remote (Massachusetts) +4 63 days ago $144,200$288,400
Python GCP Vertex AI LLM MLOps Microservices RAG Vector Search React Angular CI/CD Pub/Sub BigQuery GKE Cloud Run FHIR HL7 SRE
10+ yrs exp Remote

Principal Software Engineer

Oracle

73 days ago $114,600$234,600
C Distributed Systems Cloud Architecture Python Kernel Programming Network Programming Unix Linux Elastic File System OCI HPC AI/ML
6+ yrs exp

Principal Software Engineer

General Dynamics

San Antonio, TX 55 days ago $119,000$161,000
DevSecOps CI/CD Kubernetes Docker Terraform Ansible Puppet Chef Python Java Go Bash AWS Azure Google Cloud Agile Methodology infrastructure-as-code OWASP Nessus Burp Suite Splunk
10+ yrs exp Hybrid

Principal Software Engineer

Snap Inc.

Bellevue, WA +5 52 days ago $276,000$414,000
Distributed Systems AI Tools cross platform development Software Design Debugging Performance Analysis Test Design Scalable Services
10+ yrs exp

Principal Software Engineer

Microsoft

Redmond, WA 51 days ago $142,800$274,800
Python Java C++ C# JavaScript C Cloud Services Generative AI Machine Learning Performance Engineering Security Code Review
8+ yrs exp