below marketmost similar roles pay hereabove market
This role pays more than
86%
of similar roles. Most pay
$149,150–$216,000
— the blue band above.
At the midpoint, this role pays about
$236k
versus about
$183k
for comparable roles.
Based on 240 similar postings.
Employer
About Target
Target Corporation is a large-format general merchandise and grocery retailer offering a wide assortment of everyday essentials, apparel, home goods, and electronics through stores and online. Industry: General Merchandise Retail
Target currently has
99 open roles
on FindRole.
Listed pay typically runs
$98,000–$176,000
across 68 roles with salary data.
The Principal Threat Detection Operations Engineer joins the Threat Detection Operations team to set the technical strategy for detection engineering, platforms, services, and automations. This role involves architecting and leading the development of scalable detection capabilities to identify malicious activity across enterprise, cloud, identity, endpoint, network, and application environments. The engineer will build detection-as-code solutions, correlation logic, and alerting workflows while establishing engineering standards for CI/CD, observability, and release management. Key technologies include Python, APIs, SQL/NoSQL data stores, Git, PowerShell, Bash, and Kubernetes. The position requires translating threat intelligence and adversary behaviors into durable detection strategies. The work focuses on solving complex visibility challenges, improving detection fidelity, and ensuring security, reliability, and scalability across diverse technical environments to mitigate evolving cyber threats.
Set the technical vision, architecture, and roadmap for detection engineering to align with cybersecurity priorities.
Architect and lead the development of scalable detection capabilities using Python, APIs, and detection-as-code practices.
Establish engineering standards for source control, CI/CD, automated testing, observability, and production operations.
Lead the lifecycle management of detection rules, behavioral analytics, correlation logic, and alerting workflows.
Translate threat intelligence and incident learnings into durable detection strategies and process improvements.
Assess the viability and cost implications of new detection technologies through proofs of concept and vendor evaluations.
Define metrics to measure detection coverage, fidelity, precision, and operational performance to identify gaps.
Mentor detection engineers and provide technical leadership to build a high-performing cybersecurity team.
What we're looking for
A 4-year degree or equivalent experience is required.
10+ years of experience in cybersecurity engineering, detection engineering, threat hunting, security operations, security analytics, or related services is required.
Advanced Python programming and software engineering skills including APIs, data structures, testing, and code review are required.
Demonstrated experience in designing, developing, testing, deploying, and operating detection content through modern CI/CD and DevSecOps practices is required.
Strong hands-on experience with SIEM and security analytics platforms is required.
Deep knowledge of detection engineering principles and the ability to analyze endpoint, network, identity, cloud, and application telemetry is required.
Experience with REST APIs, SQL/NoSQL data stores, Git, PowerShell or Bash, containers/Kubernetes, and cloud technologies is required.
Proven leadership capabilities, influence, interpersonal skills, and excellent verbal and written communication skills are required.