Sr. Engineer – Pen Tester
Target · Posted Oct 26
General merchandise, apparel, grocery, and home goods retail services
Get a personal compatibility score
Add a resume for personal matches
About the role
The Application Security team at Target identifies, validates, and resolves security vulnerabilities across the company's cloud infrastructure and applications. The role is centered on application-layer and network-layer penetration testing, bug bounty triage, and remediation validation in support of compliance obligations such as PCI DSS and SOC. This Senior Engineer position leads technical security assessments and works with engineering, product, and third-party security firms.
What you will do
- Perform comprehensive manual and automated application-layer penetration tests to identify vulnerabilities, adhering to industry standards and internal methodologies.
- Conduct network-layer penetration tests encompassing all components supporting network functions and operating systems.
- Validate segmentation and scope-reduction controls at least annually and after any significant changes to ensure isolation of the Cardholder Data Environment (CDE).
- Triage and validate vulnerabilities reported through bug bounty program.
- Document and risk-rate all findings, providing actionable remediation guidance to engineering and product teams.
- Verify the correction of exploitable vulnerabilities through re-testing and post-remediation assessments.
- Collaborate with external 3rd party security firms on penetration testing and threat hunting exercises.
- Ensure all security assessments and remediation activities meet compliance and regulatory obligations (e.g., PCI DSS, SOC).
Skills used in this role
What the employer is looking for
- Minimum of 4+ years of hands-on experience in penetration testing, ethical hacking, or application security engineering.
- Deep understanding of common web-based attacks (SQLi, XSS, CSRF, XXE, etc.) and how to mitigate them at the application level.
- Proficiency in scripting or programming languages such as Python, Go, Ruby, or Bash to automate security tasks.
- Comprehensive knowledge of network protocols and security concepts, including TCP/IP, DNS, HTTP/S, TLS, and IPSEC.
- Strong experience with security testing tools (e.g., BurpSuite Enterprise, SAST, DAST, and IAST).
- Working knowledge of OWASP security fundamentals and API identity/access management (OAuth 2.0, OIDC, JWT).
- Ability to work with high autonomy and communicate technical security findings clearly to both technical and non-technical audiences.
- Relevant information security certification(s) such as OSCP, CEH, OSWE, or CISSP.
Preferred qualifications
- Direct experience managing or triaging a public bug bounty program (e.g., HackerOne, BugCrowd).
- Experience leveraging Slack/ChatOps to automate security tasks or reporting.
- Experience with cloud orchestration and Infrastructure as Code (e.g., Terraform, Google Deployment Manager).
- Familiarity with containerization and orchestration tooling like Docker and Kubernetes.
- Knowledge of compliance frameworks such as ISO 27001, PCI DSS, SOC2, or CCPA.
Benefits and support
- Compensation and benefits are detailed in the job posting
About Target
Target Corporation operates an extensive chain of general merchandise and discount retail department stores across the United States. The company provides a broad assortment of owned and national brand products, including apparel, electronics, beauty items, groceries, and home goods. Through its physical stores and digital platforms, Target focuses on delivering style, design, and value to help consumers discover the joy of everyday life.
- Industry
- Retail
- Company size
- 415000+ employees
- Founded
- 1902
- Location
- Minneapolis, Minnesota, USA
- Funding stage
- Public Company
Leadership
Chief Executive Officer
Executive Chair of the Board
Jim Lee
Executive Vice President and Chief Financial Officer
Prat Vemana
Executive Vice President and Chief Information and Product Officer
Mark Weinstein
Executive Vice President and Chief Marketing and Guest Experience Officer
Recent coverage
Home Page News
Target Completing 2026 Expansion Plan With Eight Store Openings This Fall2026-09-08
AP News
Target regains its footing under a new CEO and raises expectations for 20262026-08-19
Target Corporate
Target Unveils Multi-Year Strategy Under CEO Michael Fiddelke to Accelerate Growth2026-03-03