Senior Engineer Penetration Tester, Security… at Target · Brooklyn…

Senior Engineer Penetration Tester, Security Testing Services Location: 7000 Target Pkwy N,NCD-0375 Brooklyn Park,MN 55445 The pay range is $98,000.00 - $176,000.00 Pay is based on several factors which vary based on position. These include labor markets and in some instances may include education, work experience and certifications. In addition to your pay, Target cares about and invests in you as a team member, so that you can take care of yourself and your family. Target offers eligible team members and their dependents comprehensive health benefits and programs, which may include medical, vision, dental, life insurance and more, to help you and your family take care of your whole selves. Other benefits for eligible team members include 401(k), employee discount, short term disability, long term disability, paid sick leave, paid national holidays, and paid vacation. Find competitive benefits from financial and education to well-being and beyond at https://corporate.target.com/careers/benefits. JOIN TARGET CYBERSECURITY AS A SENIOR ENGINEER - PENETRATION TESTER About Us Target is an iconic brand, a Fortune 50 company and one of America’s leading retailers. Target as a tech company? Absolutely. We’re the behind-the-scenes powerhouse that fuels Target’s passion and commitment to cutting-edge innovation. We anchor every facet of one of the world’s best-loved retailers with a strong technology framework that relies on the latest tools and technologies—and the brightest people—to deliver incredible value to guests online and in stores. Target Technology Services is on a mission to offer the systems, tools and support that guests and team members need and deserve. Our high-performing teams balance independence with collaboration, and we pride ourselves on being versatile, agile and creative. We drive industry-leading technologies in support of every angle of the business, and help ensure that Target operates smoothly, securely and reliably from the inside out. About You As a Senior Engineer Penetration Tester on the Security Testing Services team, you help our team mission of protecting Target’s guests by leveraging deep context of our environment, strong partnerships, and relentless curiosity as we drive industry-leading pentesting at scale. Our team values are collaboration, respect, being highly adaptive, and purposeful with our work. Our team of in-house penetration testers are conducting a variety of tests but are mainly focused on large comprehensive evaluation of our key Target business functions and processes along with PCI required testing. You’ll be in direct contact with teams in a variety of business portfolios, giving you first-hand knowledge of how Target operates. Use your skills, experience and talents to be a part of groundbreaking thinking and visionary goals. You’ll take the lead as you… Perform penetration testing against our Target-developed applications, and our scoped PCI assets Manage the entire lifecycle of penetration testing from discovery, triage, testing, and validation of findings Identify and report security vulnerabilities in web applications, APIs, networks, and enterprise systems Provide clear, well-written assessments and findings with clearly defined business impact Consult with Target Tech and Security partner teams to explain findings, address security concerns, and provide guidance Support mentorship and knowledge sharing within the team Triage Bug Bounty program reports and escalate high and critical security issues with our partner teams Engage in threat model activities and provide domain expertise to best support identifying threats Provide technical oversight and coach others to resolve complex technical issues Advocate for team penetration testing and bug bounty program process and tool improvements Core responsibilities of this job are described within this job description. Job duties may change at any time due to business needs. Minimum Requirements: 4-year degree or equivalent experience 5+ years of penetration testing experience Demonstrates strong domain-specific knowledge regarding penetration testing and web application security testing Advanced knowledge of Burp Suite and other security tools (nmap, nuclei, etc) Ability to work independently and collaborate with teams effectively Strong time management and ability to meet deadlines Ability to prioritize impactful findings Experience working with Mac, Windows, and Linux Builds strong commitment within the team to support the appropriate team priorities Strong verbal and written communication skills - clearly communicates security concepts to leadership and partners within product team Demonstrates a solid understanding of the impact of own work on the team and/or guests Ability to automate and script tasks using preferred language (GoLang, Python, etc) Strong problem-solving and critical-thinking skills Passionate about mentorship and knowledge-sharing Stays current with new and evolving technologies via formal training and self-directed education This position will operate as a Hybrid/Flex for Your Day work arrangement based on Target’s needs. A Hybrid/Flex for Your Day work arrangement means the team member’s core role will need to be performed both onsite at the Target HQ MN location the role is assigned to and virtually, depending upon what your role, team and tasks require for that day. Work duties cannot be performed outside of the country of the primary work location, unless otherwise prescribed by Target. Click here if you are curious to learn more about Minnesota. Benefits Eligibility Please paste this url into your preferred browser to learn about benefits eligibility for this role: https://tgt.biz/BenefitsForYou_D Americans with Disabilities Act (ADA) In compliance with state and federal laws, Target will make reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please reach out to candidate.accommodations@HRHelp.Target.com.Non-accommodation-related requests, such as application follow-ups or technical issues, will not be addressed through this channel.