Lead Engineer - Insider Risk

The pay range is $132,000.00 - $238,000.00<p style="text-align:inherit"></p><p style="text-align:left"><span><span>Pay is based on several factors which vary based on position. These include labor markets and in some instances may include education, work experience and certifications. In addition to your pay, Target cares about and invests in you as a team member, so that you can take care of yourself and your family. Target offers eligible team members and their dependents comprehensive health benefits and programs, which may include medical, vision, dental, life insurance and more, to help you and your family take care of your whole selves. Other benefits for eligible team members include 401(k), employee discount, short term disability, long term disability, paid sick leave, paid national holidays, and paid vacation. Find competitive benefits from financial and education to well-being and beyond at </span><a href="https://corporate.target.com/careers/benefits" target="_blank" rel="noopener noreferrer"><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span class="WLM0"><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">https://corporate.target.com/careers/benefits</span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></a><span><span>.</span></span></span></p><p style="text-align:inherit"></p><p><b>JOIN TARGET AS A LEAD ENGINEER – INSIDER RISK</b></p><p></p><p><b>About us:</b></p><p>Working at Target means helping all families discover the joy of everyday life. We bring that vision to life through our values and culture. <a href="https://corporate.target.com/about" target="_blank" rel="noopener noreferrer">Learn more about Target here</a>.</p><p></p><p>As a Lead Engineer – Insider Risk, you will be pivotal in the protection of Target’s data, systems, and intellectual property by ensuring employees do not conduct malicious activities. </p><p></p><p>In this role, you will play a critical part in safeguarding enterprise data, protecting customer trust in Target, and strengthening the organization’s overall security posture against insider threats by improving detection visibility and fidelity within our UEBA, alerting functionality, and responding and mitigating all identified threats. </p><p></p><p>As a Lead Engineer you will:</p><ul><li>Help lead the design, implementation and continuous improvement of the Insider Threat and DLP programs.</li><li>Define metrics through which we can ensure our coverage is comprehensive, effective, and efficient in an ever-changing threat landscape.</li><li>Cross train with other teams within the Cyber Fusion Center such as Cyber Threat Intelligence, Incident Response, Security Architecture, and Enterprise Incident Management.</li><li>Assist in implementation of net new DLP capabilities and ITP UEBA engine.</li><li>Become proficient in workflow automation within our SOAR platform and automate previously manual processes.</li></ul><p></p><p>Responsibilities:</p><ul><li>Monitor, investigate and maintain DLP technologies across endpoints, network sensors, cloud platforms, and email systems.</li><li>Conduct root cause analysis, recommend remediation actions, and institute blocking procedures as needed to prevent similar risk moving forward.</li><li>Integrate DLP tools with SIEM, UEBA, CASB, and endpoint detection platforms.</li><li>Conduct continuous improvement of custom rules based on tradecraft knowledge, anomaly detection hunts, threat intelligence, and previous cases.</li><li>Work closely with Employee Relations, Human Resources, Security Architecture, and policy teams to improve Target’s overall security posture and move from detection to prevention.</li></ul><p></p><p>Core responsibilities of this job are described within this job description. Job duties may change at any time due to business needs.</p><p></p><p><b>About you:</b></p><ul><li>4 year degree or equivalent experience</li><li>7+ years in cybersecurity with a focus in Incident Response, DLP, and Insider Threat</li><li>Extensive experience with DLP tools (e.g. ZScaler, ForcePoint, Symantec)</li><li>Deep understanding of Insider Threat methodologies and behavioral analytics to differentiate between uncommon and malicious activity</li><li>Demonstrated programming experience in Python, PowerShell or equivalent</li><li>Experience with maintaining SIEM, UEBA, EDR, and cloud security platforms</li><li>Demonstrated ability to build strong cross-functional partnerships and influence enterprise security strategy</li><li>Experience working closely with cyber threat intelligence, incident response, or detection engineering teams</li><li>Strong problem-solving skills with the ability to navigate complex, ambiguous security challenges</li><li>Excellent communication skills, with the ability to present complex concepts clearly to technical and executive audiences</li><li>Commitment to operational excellence, safety, and continuous improvement</li><li>Self-directed learner who stays current with evolving cybersecurity threats, technologies and best practices</li></ul><p></p><p></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p>This position may be considered for a Remote or Hybrid (known internally at Target as "Flex for Your Day") work arrangement based on Target's needs.  A Remote work arrangement means the team member works full-time from home or an alternate location that's not a Target location, does not have a desk at a Target location and may travel to HQ up to 4 times a year.  A Hybrid/Flex for Your Day work arrangement means the team member's core role may be performed either remote or onsite at a Target location depending upon what your role, team and tasks require for that day. Work duties cannot be performed outside of the country of the primary work location, unless otherwise prescribed by Target.<p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:left"><b>Benefits Eligibility</b></p>Please paste this url into your preferred browser to learn about benefits eligibility for this role: <span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">https://tgt.biz/BenefitsForYou_E</span><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p></p><p></p><p><b><span>Americans with Disabilities Act (ADA)</span></b></p><p></p><p><span>In compliance with state and federal laws, Target will make reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please reach out to </span><span><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">candidate.accommodations@HRHelp.Target.com.</span></span><span> </span><span><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">Non-accommodation-related</span></span><span> requests, such as application follow-ups or technical issues, will not be addressed through this channel.  </span></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p>Application deadline is : 06/19/2026

Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...