Director of Engineering - Cloud Security

The pay range is $168,000.00 - $303,000.00 Pay is based on several factors which vary based on position. These include labor markets and in some instances may include education, work experience and certifications. In addition to your pay, Target cares about and invests in you as a team member, so that you can take care of yourself and your family. Target offers eligible team members and their dependents comprehensive health benefits and programs, which may include medical, vision, dental, life insurance and more, to help you and your family take care of your whole selves. Other benefits for eligible team members include 401(k), employee discount, short term disability, long term disability, paid sick leave, paid national holidays, and paid vacation. Find competitive benefits from financial and education to well-being and beyond at https://corporate.target.com/careers/benefits . About Us: Working at Target means helping all families discover the joy of everyday life. We bring that vision to life through our values and culture.   Learn more about Target here .   Target is one of the world’s most recognized brands and one of America’s leading retailers. But behind the brand our guests   love,   is a culture of continual innovation and right now, we are up to   big things ! Target’s security team is a place where innovation happens daily. Interested in a culture that combines ongoing learning, engineering excellence, and stellar outcomes? We are too –   that’s   why we work here. Join our team to improve Target’s security and move the business forward.   As an Engineering Director on the Cloud Security team,   you'll   lead a team of engineers responsible for deploying,   operating , automating, and scaling cloud security capabilities across Target's public and private cloud environments. Your team is responsible for turning requirements into running, scaled, and continuously improving controls – including CSPM,   IaC   scanning, Kubernetes admission control, SSPM, secure configuration   manag ement, cloud workload protection, and the integration of cloud security findings into Target's enterprise remediation and governance processes.   Beyond deep technical   expertise , you have a strong bias for action and a builder's mindset .    Cloud Security sits   between architecture   and the engineering teams who consume it, and you are comfortable operating in that   realm   – translating security requirements into reliable, automated, developer-friendly controls; owning the day-to-day operation and continuous improvement of the platforms that enforce them; coordinating exceptions and developer-experience tradeoffs with BISO, Security Architecture, and product engineering; and partnering with Detection & Response, Vulnerability Management, and the broader Cloud Platform organization so that cloud security findings flow into the enterprise remediation lifecycle. You have the engineering credibility to lead engineers who build and   operate   this platform, and the communication and partnership skills to make the controls land well across Target.   Expect to:   •   Lead, build, and develop a team of cloud security   platform , automation, and governance engineers responsible for the day-to-day implementation and operation of Target's cloud security controls.   •   Establish   good stakeholder communication, work closely with partner teams, and help drive requirements while being a strong advocate of efficient and secure engineering practices.   •   Build and manage a team of high performing engineers and provide leadership, coaching, motivation and recommend staffing levels, operating procedures, tools, and systems for the team.   •   Provide career development and performance management to a team of engineers.   •   Set the engineering culture and bar for the team — code quality, testing, code review, on-call hygiene, postmortems, and operational excellence.   •   Own the end-to-end engineering, deployment, configuration, and ongoing operation of Target's cloud security platforms — including CSPM,   IaC   scanning, Kubernetes admission control, SSPM, secure config management, and cloud workload protection — across Target's public and private cloud environments.   •   Operate   these platforms as production systems: own   their availability , performance, observability, capacity, upgrade cadence, and outage response, with clear SLOs and on-call coverage.   •   Own the implementation of   IaC   scanning policies in CI/CD pipelines, turning architectural requirements (e.g., Rego policy) into reliable, developer-friendly guardrails that fail fast and explain why.   •   Implement and   operate   Kubernetes admission controller policies across the private and public cloud   fleet, and   own the rollout strategy that gets to enforcement without breaking developers.   •   Build and   operate   the capabilities that support cloud incident response in partnership with Detection & Response.   •   Translate policy requirements into a prioritized engineering   roadmap, and   deliver against it predictably.   •   Drive multi-quarter initiatives end-to-end: from problem framing and scoping, through design, build, rollout, adoption, and steady-state operation.   •   Make pragmatic build-vs-buy decisions and own the lifecycle of the cloud security tools the team   operates : vendor relationship, evaluations/POCs, contract input, capability adoption, and sunsetting.   •   Drive adoption of the team's controls across Target Tech, including onboarding, exception/governance workflows, and developer enablement.   •   Treat the cloud security control plane as a product: invest in automation, self-service, and platform thinking so controls scale with Target's cloud footprint.   •   Continuously reduce toil for both your team and Target's engineering organization — fewer one-off tickets, more paved roads, better defaults, faster feedback in CI/CD.   •   Own the developer e