Cybersecurity Senior Engineer | AI Security

The Home Depot; Atlanta (GA); On-site; USD 120,000 - 160,000; Full time

Job summary

The Home Depot is seeking an advisory engineer to guide AI security across models, SaaS agents, and MCP servers. You will shape pre- and post-production scanning policies, maintain a complete inventory of models, apps, and agents, and drive remediation under defined SLAs.

You will lead security tooling and posture management programs, advise engineering teams, and build repeatable threat modeling processes across the enterprise. Strong collaboration and documentation are essential.

Qualifications

• 3+ years of hands-on experience in data security and/or application security.
• Experience advising engineering teams on security tooling and policy, including AI-BOM, AI-SPM or comparable software supply chain and posture management practices.
• Experience with CI/CD pipelines and release processes, including security scanning and policy gates.
• Experience building inventories and dashboards for assets such as models, apps, agents and APIs, and driving remediation against defined SLAs.
• Strong written and verbal communication skills.

Responsibilities

• Design automation workflows and capabilities in support of data collection, investigation and incident response.
• Develop threat hunting and data analysis strategy and capabilities.
• Advise on pre-production model scanning in the CI/CD pipeline, including policies that block or flag risky models and a complete model inventory.
• Advise on post-production model scanning of running models, and on remediation of high and critical findings within defined SLAs.
• Advise on the AI-BOM, so that models, datasets, libraries and dependencies behind each AI system are inventoried and tracked.
• Advise on SaaS agent security tooling across all AI platforms that host SaaS agents, including policies and a complete agent inventory.
• Classify third-party AI SaaS apps as approved or unapproved, and build a repeatable program for threat modeling and security policy on those apps.
• Advise on a Shadow AI dashboard that discovers models, apps, agents and MCP servers.
• Troubleshoot issues at the application level with engineering and platform teams.
• Document standards, runbooks, policies and exceptions.

Skills

Data security

Application security

Security tooling

AI-BOM

AI-SPM

Threat modeling

Inventory management

Dashboards

Cross-team collaboration

Documentation

Education

High school diploma or GED

Tools

CI/CD tooling

Security scanning tools

SBOM tooling

AI model scanning tools

Job description

Position Purpose

This engineer advises on the security posture of AI models, AI bills of materials and SaaS agents at The Home Depot, from pre-production scanning through post-production remediation.

Req197419

Position Purpose

This engineer advises on the security posture of AI models, AI bills of materials and SaaS agents at The Home Depot, from pre-production scanning through post-production remediation.

Role Summary

You will act as the advisory engineer for AI-BOM, AI Security Posture Management (AI-SPM) and AI SaaS agent security, guiding the teams that deploy and operate these controls. You will advise on the policies that gate risky models before release, and on keeping a complete inventory of models, agents, apps and MCP servers across the enterprise. You will also stand up the program that sorts third-party AI SaaS apps into approved and unapproved and speeds up their threat modeling.

Key Responsibilities

• 100% Deliver Execution, Plans & Align, Problem Solving - Design automation workflows and capabilities in support of data collection, investigation and incident response Develop threat hunting and data analysis strategy and capabilities Identify and propose new technologies, methodologies and/or approaches to detecting malicious activity Utilize indicators to scope and respond proactively to emerging threats Design, build, configure, maintain and monitor cybersecurity threat defense capabilities and user access management
• Act as the advisory engineer for AI-BOM, AI-SPM and AI SaaS agent security.
• Advise on pre-production model scanning in the CI/CD pipeline, including policies that block or flag risky models and a complete model inventory.
• Advise on post-production model scanning of running models, and on remediation of high and critical findings within defined SLAs.
• Advise on the AI-BOM, so that models, datasets, libraries and dependencies behind each AI system are inventoried and tracked.
• Advise on SaaS agent security tooling across all AI platforms that host SaaS agents, including policies and a complete agent inventory.
• Classify third-party AI SaaS apps as approved or unapproved, and build a repeatable program for threat modeling and security policy on those apps.
• Advise on a Shadow AI dashboard that discovers models, apps, agents and MCP servers.
• Troubleshoot issues at the application level with engineering and platform teams.
• Document standards, runbooks, policies and exceptions.

Direct Manager/Direct Reports

• This Position typically reports to Manager or Sr. Manager
• This Position has 0 Direct Reports

Travel Requirements

• No travel required.

Physical Requirements

• Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.

Working Conditions

• Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.

Minimum Qualifications

• Must be eighteen years of age or older.
• Must be legally permitted to work in the United States.

Preferred Qualifications

• 5+ years of hands-on experience in data security and/or application security, including engineering and administering security tooling in an enterprise environment.
• Working knowledge of how AI and ML models are developed, trained, packaged and deployed, including common model formats, registries and the risks tied to each (for example, unsafe serialization, poisoned or tampered models, and exposed secrets).
• Experience advising engineering teams on security tooling and policy, including AI-BOM, AI-SPM or comparable software supply chain and posture management practices.
• Experience with CI/CD pipelines and release processes, including integrating security scanning and policy gates into the pipeline and deploying new security products.
• Experience troubleshooting security tools and integrations at the application level, working with engineering and platform teams to resolve issues.
• Experience building and maintaining inventories and dashboards for assets such as models, applications, agents and APIs, and driving findings to remediation against defined SLAs.
• Experience working across multiple teams to complete tasks, with strong written and verbal communication skills.
• Strong documentation skills, including policies, standards, runbooks and intake procedures.
• Ability to leverage AI tools to improve areas such as scripting, analysis, documentation and operational efficiency while maintaining appropriate data protection and accuracy.
• Preferred: experience with model scanning, SaaS security posture, SBOM or AI-BOM tooling, or third-party risk and threat modeling programs.
• Preferred: previous experience leading, coaching or mentoring team members.

Minimum Education

• The knowledge, skills and abilities typically acquired through the completion of a high school diploma and/or GED.

Preferred Education

• No additional education

Minimum Years Of Work Experience

• 3

Preferred Years Of Work Experience

• No additional years of experience

Minimum Leadership Experience

• None

Preferred Leadership Experience

• None

Certifications

• None

Competencies

• Action Oriented
• Collaborates
• Communicates Effectively
• Customer Focus
• Drives Results

Apply End Date: 12/21/2026