Director - Cyber Threat Intelligence (CTI)

Pay is based on several factors which vary based on position. These include labor markets and in some instances may include education, work experience and certifications. In addition to your pay, Target cares about and invests in you as a team member, so that you can take care of yourself and your family. Target offers eligible team members and their dependents comprehensive health benefits and programs, which may include medical, vision, dental, life insurance and more, to help you and your family take care of your whole selves. Other benefits for eligible team members include 401(k), employee discount, short term disability, long term disability, paid sick leave, paid national holidays, and paid vacation. Find competitive benefits from financial and education to well-being and beyond at https://corporate.target.com/careers/benefits.

Target is an iconic brand, a Fortune 50 company and one of America's leading retailers.

As a Director of Cyber Threat Intelligence (CTI), this role will lead a team of cyber threat analysts to drive strategic & technical analysis of key cyber threats. This role will lead in the identification and prioritization of information security threats, and advise Cyber Fusion Center partners on security/privacy risks & mitigations. The Director of CTI will also be tasked with collaborating with defensive control owners, threat research, and incident response to track and defend against emerging threat tactics, techniques, and procedures. This role will enable business and information security integration across the enterprise and be a key conduit for integration between Information Security and Risk teams and business and technology programs and initiatives.

Additionally, the candidate stepping into this role will:

• Maintain industry-wide expertise of the current cyber threat landscape and attack vectors
• Advise technology and information security teams, including CISO and senior leaders on industry cyber threats, trends, technology, information security issues and legislation that impact the company's security posture and inform our information security policy.
• Align initiatives with business objectives of the company and provide support to a variety of enterprise projects.
• Lead and develop a team of tactical cyber-threat analysts, and drive the team through proactive engagement in company initiatives across the enterprise to support the security and privacy work streams for a variety of projects and initiatives.
• Represent CTI area in planning, development, implementation and problem resolution within Technology Services.
• Develop or guide lightweight engineering solutions that improve intelligence collection, enrichment, analysis, correlation, and dissemination.
• Automate repetitive intelligence processes and enable analysts to focus on higher-value analytic activities.
• Integrate internal security telemetry with external threat intelligence to improve contextualization and prioritization.
• Partner with security engineering and platform teams to develop sustainable integrations between CTI platforms and technologies such as SIEM, SOAR, EDR, vulnerability management, asset management, and detection platforms.
• Evaluate emerging technologies, including artificial intelligence and machine learning, that can improve intelligence collection, analysis, and analyst workflows.
• Align with senior stakeholders at the VP and SVP levels regarding information security and compliance risks to the business pyramid.
• Participate in annual planning process for technology and business activities.
• Maintain an awareness of technological trends and use this knowledge to bring solutions to enhance the enterprise's competitive edge.

Core responsibilities of this job are described within this job description. Job duties may change at any time due to business needs.

About You:

• 4-year degree and/or equivalent experience
• 7+ years' of relevant experience
• You have expert knowledge of the cyber threat landscape and the ability to communicate those threats to senior leadership
• Must demonstrate advanced technical understanding and extensive knowledge of tactics, techniques, and procedures associated with malicious cyber activity, organized crime, and both state and non-state sponsored threat actors
• Experience with establishing collection, analyzing, and actioning Threat Intelligence
• Ability to apply Cyber Threat Intelligence through enrichment, correlation, and attribution
• Strong experience with offensive security tactics, techniques, and procedures (DDoS, Malware, Phishing, Vulnerabilities, etc.)
• Technical experience with Threat Intelligence tools such as Passive DNS, Malware research / Virus Total Intelligence, URLScan, etc.
• Deep experience working with industry-wide frameworks and standards like MITRE ATT&CK
• Experience with threat intelligence vendors and platforms
• You have a proven ability to lead and grow a multifunctional cybersecurity organization
• You are a coach and mentor with the ability to drive improvement and high potential development in others
• Ability to lead down, across, and up in order to persuade and/or negotiate desired outcomes
• Strong verbal, written and presentation skills
• Broad and deep knowledge of business, technology/IT, cybersecurity technologies and approaches

This position will operate as a Hybrid/Flex for Your Day work arrangement based on Target’s needs. A Hybrid/Flex for Your Day work arrangement means the team member’s core role will need to be performedboth onsite at the Target HQ MN location the role is assigned to and virtually, depending upon what your role, team and tasks require for that day. Work duties cannot be performed outside of the country of the primary work location, unless otherwise prescribed by Target. Click here if you are curious to learn more about Minnesota. 

Benefits Eligibility

Americans with Disabilities Act (ADA)

In compliance with state and federal laws, Target will make reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please reach out to candidate.accommodations@HRHelp.Target.com.Non-accommodation-related requests, such as application follow-ups or technical issues, will not be addressed through this channel.