Sr Cybersecurity Analyst - CSIRT (Incident Response)

The pay range is $88,000.00 - $158,000.00

Pay is based on several factors which vary based on position. These include labor markets and in some instances may include education, work experience and certifications. In addition to your pay, Target cares about and invests in you as a team member, so that you can take care of yourself and your family. Target offers eligible team members and their dependents comprehensive health benefits and programs, which may include medical, vision, dental, life insurance and more, to help you and your family take care of your whole selves. Other benefits for eligible team members include 401(k), employee discount, short term disability, long term disability, paid sick leave, paid national holidays, and paid vacation. Find competitive benefits from financial and education to well-being and beyond at ;br>
JOIN TARGET CYBERSECURITY AS A Sr Cybersecurity Analyst - CSIRT (Incident Response)

About Us

As a Fortune 50 company with more than 400,000 team members worldwide, Target is an iconic brand and one of America's leading retailers.

Target as a tech company? Absolutely. We're the behind-the-scenes powerhouse that fuels Target's passion and commitment to cutting-edge innovation. We anchor every facet of one of the world's best-loved retailers with a strong technology framework that relies on the latest tools and technologies-and the brightest people-to deliver incredible value to guests online and in stores. Target Technology Services is on a mission to offer the systems, tools and support that guests and team members need and deserve. Our high-performing teams balance independence with collaboration, and we pride ourselves on being versatile, agile and creative. We drive industry-leading technologies in support of every angle of the business, and help ensure that Target operates smoothly, securely and reliably from the inside out.

As a Senior Cybersecurity Analyst - CSIRT, you'll help lead a team in response as you assess information security events and incidents across the Target environment. In this role, you will collaborate and utilize problem solving skills as you work among a team of skilled analysts to address complex problems within a 24x7 Cyber Fusion Center (CFC) environment. You will implement new processes and procedures as identified by the CSIRT and CFC Leadership to ensure continuous improvements for Target's monitoring, detection and mitigation capabilities. You will use your well-rounded knowledge of Cybersecurity to monitor SIEM and logging environments for security events and alerts to potential (or active) threats, intrusions, and/or compromises. You will assist in the training of Cybersecurity Analysts to ensure in their continued education. You will work to understand the global threat landscape by working with Target Cyber Threat Intel team to maintain awareness. You will work event requests from internal teams and will escalate information security incidents according to Target's Cybersecurity Incident Response Plan. Additionally, you will help lead with containment of threats and remediation of environment during or after an incident. You'll act as a participant during Cyber Hunt activities with Target's Hunt Team. You will leverage your well-rounded knowledge to write comprehensive reports of incident investigations.

Core responsibilities of this job are described within this job description. Job duties may change at any time due to business needs.

Note: This is a shift position on Shift 4 within CSIRT. The working hours for this role are Wednesday - Saturday, 12:30pm - 10:30pm CT. If you are applying for this role you acknowledge and accept the days and times of this role.

About You

• 2-year degree or equivalent experience
• 2-5 years' direct experience with Security Operations, Incident Response, or Digital Forensics
• Security certification (e.g. GCFA, GREM, OSCP)
• Thorough understanding of intermediate to advanced security and network concepts (Operating systems, intrusion/detection, TCP/IP, ports, etc.)
• Experience with host and network-based security tools
• Experience with network monitoring in a SOC environment
• Experience with Security Orchestration, Automation, and Response (SOAR) platforms
• Ability to demonstrate analytical expertise, close attention to detail, excellent critical thinking, logic, and adaptive learning
• Ability to navigate ambiguity and develop working business relationships
• Excellent written and oral communication skills

This position will operate as a Hybrid/Flex for Your Day work arrangement based on Target's needs. A Hybrid/Flex for Your Day work arrangement means the team member's core role will need to be performed both onsite at the Target HQ MN location the role is assigned to and virtually, depending upon what your role, team and tasks require for that day. Work duties cannot be performed outside of the country of the primary work location, unless otherwise prescribed by Target. Click here if you are curious to learn more about Minnesota.

Benefits Eligibility
Please paste this url into your preferred browser to learn about benefits eligibility for this role: _D

Americans with Disabilities Act (ADA)

In compliance with state and federal laws, Target will make reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please reach out to Non-accommodation-related requests, such as application follow-ups or technical issues, will not be addressed through this channel.