Sr Engineer - Automated Threat Protection (ATP)

Sr Engineer - Automated Threat Protection (ATP)

Working at Target means helping all families discover the joy of everyday life. We bring that vision to life through our values and culture. Learn more about Target here.

As a Senior Engineer, you serve as a specialist in the engineering team that supports the product. You help develop and gain insight in the application architecture. You can distill an abstract architecture into concrete design and influence the implementation. You show expertise in applying the appropriate software engineering patterns to build robust and scalable systems. You are an expert in programming and apply your skills in developing the product. You have the skills to design and implement the architecture on your own but choose to influence your fellow engineers by proposing software designs, providing feedback on software designs and/or implementation. You show good problem-solving skills and can help the team in triaging operational issues. You leverage your expertise in eliminating repeat occurrences. Use your skills, experience and talents to be a part of groundbreaking thinking and visionary goals.

As a Sr. Engineer, you'll take the lead as you…

1. Support the configuration and tuning of CDN-based security controls (e.g., WAF rules, rate limits, bot management policies).
2. Help analyze and respond to traffic anomalies such as DDoS attacks, credential-stuffing attempts, or reseller abuse.
3. Partner with internal teams (Fraud, Cyber Defense, Site Reliability Engineering) to manage incident mitigations and share insights.
4. Work with third-party vendors and internal platforms to maintain visibility into attack patterns and service health.
5. Assist in distinguishing good guest traffic from bad actor traffic by reviewing logs, dashboards, and behavioral patterns.
6. Learn and contribute to automation and monitoring efforts that improve efficiency and resilience at the network edge.
7. Document playbooks, standard procedures, and lessons learned to strengthen the team's overall defense posture.

Core responsibilities of this job are described within this job description. Job duties may change at any time due to business needs.

About you:

• 4 year degree or equivalent experience
• 2+ years of experience in network, application, or CDN security engineering (or related operational experience)
• Familiarity with CDN platforms (Akamai, Cloudflare, Fastly, or similar)
• Understanding of web security fundamentals, including WAFs, rate limiting, DNS, and edge caching
• Comfortable using scripting or automation tools (Python, Bash, or similar) to streamline operational tasks
• Experience with traffic analysis and incident response in production environments is a plus
• Awareness of bot detection, account takeover prevention, or fraud mitigation concepts
• Eager to learn new tools and technologies related to AI-driven traffic behavior and evolving digital threats
• Excellent communication and teamwork skills, with an interest in cross-functional problem solving

This position will operate as a Hybrid/Flex for Your Day work arrangement based on Target's needs. A Hybrid/Flex for Your Day work arrangement means the team member's core role will need to be performed both onsite at the Target HQ MN location the role is assigned to and virtually, depending upon what your role, team and tasks require for that day. Work duties cannot be performed outside of the country of the primary work location, unless otherwise prescribed by Target.

Click here if you are curious to learn more about Minnesota.

Benefits Eligibility

Please paste this url into your preferred browser to learn about benefits eligibility for this role.

Americans with Disabilities Act (ADA)

In compliance with state and federal laws, Target will make reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please reach out to candidate.accommodations@HRHelp.Target.com. Non-accommodation-related requests, such as application follow-ups or technical issues, will not be addressed through this channel.