AI Security Advisory Engineer for AI-BOM & SPM

The Home Depot, Inc.; Atlanta (GA); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

None

Job summary

The Home Depot, Inc. seeks an advisory engineer for AI-BOM, AI-SPM and AI SaaS agent security to guide teams deploying and operating these controls. You will advise on policies gating risky models and maintain a complete inventory of models, agents and MCP servers across the enterprise.

You will also stand up a program that sorts third-party AI SaaS apps into approved and unapproved, and speeds up their threat modeling through repeatable security policies.

Qualifications

• 5+ years of hands-on data security and/or application security, including engineering and administering security tooling in an enterprise environment.
• Experience with AI/ML model development, deployment and risk
• Experience advising engineering teams on security tooling and policy, including AI-BOM, AI-SPM or comparable software supply chain practices.

Responsibilities

• Design automation workflows for data collection, investigation and incident response.
• Advise on pre-production model scanning in CI/CD pipelines with risk policies and inventory.
• Advise on post-production scanning and remediation within defined SLAs.
• Build inventories and dashboards for assets such as models, apps, agents and APIs and drive remediation.

Skills

Data security

Application security

Security tooling

Threat modeling

CI/CD security

Documentation

Communication

Education

High school diploma or GED

Tools

AI-BOM

AI-SPM

SaaS security tooling

CI/CD tooling

Job description

The Home Depot, Inc. seeks an advisory engineer for AI-BOM, AI-SPM and AI SaaS agent security to guide teams deploying and operating these controls. You will advise on policies gating risky models and maintain a complete inventory of models, agents and MCP servers across the enterprise.

You will also stand up a program that sorts third-party AI SaaS apps into approved and unapproved, and speeds up their threat modeling through repeatable security policies.