Note: The job is a remote job and is open to candidates in USA. Target is a retail organization with a Cyber Fusion Center focused on security innovation, adversary behavior, and organizational risk reduction. The Lead Engineer - Red Team will lead and execute adversary emulation operations, conduct threat research, develop tools and playbooks, mentor operators, collaborate with security and engineering teams, and communicate findings to defenders and stakeholders.

Responsibilities

• Consult on, design, and execute adversary emulation operations
• Conduct research into real-world threat actor tactics, techniques, and procedures to develop proof-of-concept tools and playbooks
• Bypass preventative and detective security controls to accomplish operational goals
• Partner with the Cyber Security Incident Response Team and other stakeholders in the organization to identify improvement opportunities
• Collaborate with Cyber Threat Intelligence, Detection, and Threat Hunting engineers and analysts on research
• Work with non-security engineering teams to educate, and collaborate on operational objectives
• Develop strategic adversary emulation objectives and operational plans
• Execute adversary emulation operations to surface risk in the organization
• Work with partner teams to plan cooperative engagements
• Lead and train operators
• Communicate effectively with and directly support defenders
• Present findings and operational work to groups in a clear and professional manner
• Study the techniques of Threat Actors, and apply that lens to operational work
• Partner with other Team Members to improve tools and procedures
• Manage work effectively in the team’s project management tools (Github/JIRA)
• Respond to the quick-changing needs and priorities of the team
• Read and write code to accomplish red team goals
• Deeply understand red team infrastructure

Skills

• • Four years minimum experience in offensive security and/or defensive security
• • Demonstrates strong offensive security knowledge
• • Demonstrates strong understanding of the impact of Red Team work on an organization and its customers
• • Prioritizes process improvement
• • Seeks out cross-functional collaboration opportunities
• • Clearly and respectfully communicates technical issues in a training or mentorship setting
• • Resolves complex technical issues with minimal assistance
• • Builds strong commitment within a team to support the appropriate priorities
• • Stays current on relevant technologies with self-directed learning
• • Deep Red Team adversary emulation experience
• • Experience working on or with Blue Teams, including Incident Response, or Detection
• • Experience working in large, complex organizations
• • Python, C#, Rust, Go, or C skills
• • Solving difficult problems, and creatively subverting systems
• • Ability to replicate the tools and techniques of in-the-wild threat actors
• • Follows Threat Actor trends impacting organizational security

Benefits

• Eligible team members and their dependents may receive comprehensive health benefits and programs, which may include medical, vision, dental, life insurance and more.
• 401(k) for eligible team members
• Employee discount for eligible team members
• Short term disability for eligible team members
• Long term disability for eligible team members
• Paid sick leave for eligible team members
• Paid national holidays for eligible team members
• Paid vacation for eligible team members
• Remote or Hybrid (known internally at Target as "Flex for Your Day") work arrangement based on Target's needs

Company Overview

Company H1B Sponsorship