Sr Engineer( Network Security Monitoring) - Target India

About us:

As a Fortune 50 company with more than 400,000 team members worldwide, Target is an iconic brand and one of America's leading retailers.

Joining Target means promoting a culture of mutual care and respect and striving to make the most meaningful and positive impact. Becoming a Target team member means joining a community that values different voices and lifts each other up. Here, we believe your unique perspective is important, and you'll build relationships by being authentic and respectful.

Overview about TII
At Target, we have a timeless purpose and a proven strategy. And that hasn’t happened by accident. Some of the best minds from different backgrounds come together at Target to redefine retail in an inclusive learning environment that values people and delivers world-class outcomes. That winning formula is especially apparent in Bengaluru, where Target in India operates as a fully integrated part of Target’s global team and has more than 4,000 team members supporting the company’s global strategy and operations.

(Pyramid overview)

Network Security Monitoring (NSM) Position About Network Security Monitoring: Target's Network Security Monitoring (NSM) team builds and maintains a fleet of over 2000 network sensors across the globe, providing network visibility and advanced monitoring capabilities to our Cyber Defense organization. We build scalable and maintainable infrastructure with full end-to-end ownership of both the hardware and software lifecycle. Our work enables timely detection and response of adversaries by delivering reliable network visibility through a resilient sensor grid and advanced monitoring capability.

Team Overview

NSM team members regularly: - Collaborate with Networking partners on network design and network sensor placement - Build, deploy, and upgrade network sensors (servers) globally - Design and implement network traffic analysis solutions using engines like Zeek and Suricata - Leverage Salt and Ansible for configuration management, deployment automation, and infrastructure-as-code implementation - Partner with Cyber Defense to build network-based detections and consult in response scenarios - Develop performance monitoring solutions to track data quality and sensor health to ensure grid health and data fidelity

Position Overview

Expect to: - Configure, troubleshoot, and optimize network sensors across diverse environments especially Unix and Containers

• Debug complex networking issues and perform packet-level analysis to ensure proper traffic visibility.
• Build and maintain Salt and Ansible based automation for configuration management and deployment using CICD pipeline
• Analyze monitoring data to identify system improvements and validate detection coverage.
• Develop and automate testing to ensure results and outcomes are as expected.
• Participate in on-call rotations to support the global sensor grid and respond to critical issues.

- Collaborate cross-functionally with teams throughout Cyber Defense and IT - Document operational procedures for sensor management best practices - Research new network security monitoring technologies and evaluate their potential implementation.

• Contribute to capacity planning and architectural design of monitoring infrastructure.
• Manage and maintain Linux/Unix-based systems that host Zeek sensors, ensuring high availability, performance, and security.
• Perform OS(Unix)-level troubleshooting, patching, and hardening of sensor infrastructure.
• Automate server provisioning and configuration using tools like Salt, shell scripting, and Python.
• Monitor system logs and metrics to proactively identify and resolve issues affecting sensor performance.

About you:

• Bachelor's degree in Networking, Computer Science, or related field (or equivalent experience).
• 4+ years of experience in network administration, network security, or related roles, with a deep knowledge of network protocols and packet analysis.
• Experience with network security monitoring tools, including Zeek and Suricata.
• Strong foundation in automation and infrastructure as code, Salt and Ansible experience preferred.
• You understand CI/CD principles and can implement pipelines for testing and deploying code and configuration changes.
• Proficient in Linux/Unix systems administration, including shell scripting, system tuning, and troubleshooting.
• Hands-on experience managing server infrastructure in production environments, including patching, upgrades, and performance tuning.
• Practical experience with packet capture technologies and traffic analysis tools.
• Proven ability to troubleshoot complex distributed systems and methodically diagnose network issues.
• You appreciate the importance of dev/prod parity and can design for consistent environments across dev and prod.
• Experience writing custom detection rules and understanding their performance implications.
• Familiarity with technologies such as Zabbix, Prometheus, Grafana, Beats, Logstash, Elastic and Kibana