Senior Manager - CSIRT Cybersecurity Defense

The Senior Manager - CSIRT Cybersecurity Defense leads a shift of CSIRT analysts focused on alert intake, triage, and response. This role oversees incident response operations, strengthens response frameworks, coordinates cross-functional activity during incidents, and reports incident trends to senior leadership.

Incident Response Leadership

• Direct all phases of the incident response lifecycle, including analysis, containment, eradication, recovery, and post-incident analysis.
• Manage a shift composed of CSIRT analysts responsible for alert intake, triage, and response.
• Serve as a central point of contact during major security incidents, coordinating efforts with partner teams.

Policies, Playbooks, and Escalation Workflows

• Establish and regularly update incident response policies, procedures, playbooks, and escalation workflows aligned with industry best practices.
• Build and maintain incident response frameworks to support consistent execution during high-severity events.

Metrics, Threat Trends, and Risk Insights

• Develop and present incident metrics, threat trends, and risk insights to senior leadership to support strategic decision-making.

Coaching and Team Development

• Provide leadership, coaching, and technical guidance to incident responders and analysts to build a high-performing team.

Simulation, Exercises, and Threat Intelligence

• Contribute to regular tabletop exercises, red team engagements, and technical simulations to assess and strengthen response capabilities.
• Leverage internal and external threat intelligence to inform response strategies and anticipate emerging attack vectors.

Process Optimization and Automation

• Identify opportunities for automation and process optimization using tools such as SOAR platforms.

Required Qualifications

• 4-year degree or equivalent experience in a related field.
• 5+ years of SOC/IR experience.
• 1-3 years of building and leading high-performing cybersecurity teams with direct reports.
• Cyber security certification (e.g. GIAC, Offensive security, ISC2).
• Deep understanding of and experience with monitoring and detection, incident response, artifact collection and analysis, cloud environments, and attacker mindset.
• Ability to lead CSIRT effectively during a high-severity security incident.
• Lifelong learner focused on continuous improvement and developing both personal and team skills and capabilities.
• Ability to convey technical information clearly and concisely.

Preferred Qualifications

• Experience with any combination of digital forensics, reverse engineering, threat intelligence, threat hunting, and SOAR.
• Experience with various operating systems and host-based security controls.
• Experience with network-based security controls, network infrastructure, and protocols.
• Experience working in a Cyber Fusion Center with highly collaborative, cross-functional teams.

Technologies

• SOAR
• GIAC
• Offensive security
• ISC2

Location and Work Arrangement

Location: Brooklyn Park, MN (hybrid).

Hybrid/Flex for Your Day arrangement: Core responsibilities are performed both onsite at Target HQ in MN and virtually, depending on daily role needs. Work duties cannot be performed outside the country of the primary work location unless otherwise prescribed by Target.

Compensation

Salary Range: USD 132,000 - 238,000 per year.

Benefits

• Comprehensive health benefits and programs, which may include medical, vision, dental, and life insurance.
• 401(k)
• Employee discount
• Short term disability
• Long term disability
• Paid sick leave
• Paid national holidays
• Paid vacation

Benefits eligibility link: https://tgt.biz/BenefitsForYou_E

Americans with Disabilities Act (ADA)

• Target will make reasonable accommodations for applicants with disabilities in accordance with state and federal laws.
• If a reasonable accommodation is needed to participate in the job application or interview process, contact [email protected].