Cybersecurity Staff Analyst - Human Risk

The Home Depot, Inc.; Georgia; On-site; USD 150,000 - 210,000; Full time

Job summary

The Home Depot, Inc. is seeking an experienced Cybersecurity Staff Analyst to lead the Training and Awareness Team. This role advances a human risk management program by applying CTI insights to simulations and awareness content, shaping a proactive security posture.

You will drive strategic initiatives, mentor colleagues, and partner with the Cybersecurity Manager to implement risk-based improvements, with no direct reports required at hire.

Qualifications

• Deep cyber threat intelligence experience and ability to translate TTPs into training/design input.
• Independent worker with minimal supervision; ability to lead without direct reports.
• Strong collaboration across stakeholders and cross-functional teams.

Responsibilities

• Oversee multiple projects and align solutions with customer expectations.
• Lead training, simulation, and awareness efforts with strategic direction.
• Evolve Human Risk Management through adaptive training and real-time triggers.
• Deliver threat landscape briefings and partner with CTI team.
• Manage ZenGuide/Proofpoint platform operations for simulations and training.

Skills

Threat intelligence

Cybersecurity

Leadership

Communication

Tools

ZenGuide

Proofpoint

Job description

Position Purpose:

The Cybersecurity Staff Analyst is the team lead and most senior individual-contributor role on the Training and Awareness Team - the primary driver behind evolving our program from a traditional security awareness model, built around simulation pass/fail metrics and annual compliance training, into a mature Human Risk Management program that continuously adapts to real behavioral risk. This person operates with minimal oversight, exercises independent and sound judgment on ambiguous problems, and serves as a strong team lead and thought partner to the Manager - helping propel the team's strategy and key initiatives forward, without formal people-management authority or direct reports. This person applies deep cyber threat intelligence (CTI) expertise to close the gap between what simulations measure and what actually drives real-world compromise - independently collecting, analyzing, and translating threat actor tactics, techniques, and procedures (TTPs), social engineering trends, and MITRE ATT&CK-mapped behavior into the timely, actionable input that shapes Simulation scenario design and Awareness campaign content, and into the case for adopting more adaptive, risk-based program capabilities. Process and operational improvement, training advisory work, and team mentoring are responsibilities this person grows into within roughly the first six months, although demonstrated experience is required upon hire.

Key Responsibilities

100% Deliver Execution, Plans & Aligns, Develop Others - Oversee multiple projects simultaneously; Strategic partner to align solutions to customers expectations Communicate to various levels of business partners; Collaborate with stakeholders, business partners, colleagues, developers and others to deliver high quality solutions; Partner cross-functionally to define assess, communicate, implement, train and change management of projects; Lead, mentor and provide guidance to team members and partners; Serve as SME and perform research/analysis within assigned projects

Strategic Leadership

Serve as team lead for the Training and Awareness Team - providing day-to-day direction, prioritization, and technical leadership across Training, Simulation, and Awareness pillars, and acting as an informal technical resource and thought partner to analysts across all three when cross-pillar input is useful. Act as a strategic thought partner to the Cybersecurity Manager, helping translate strategy into concrete, prioritized initiatives and ensuring key workstreams keep moving forward. Champion and help drive forward the team's highest-priority strategic initiatives - including the Human Risk Management transformation, platform roadmap adoption, and new capability rollouts - partnering across pillars to clear blockers and keep momentum. Serve as acting manager on an as-needed basis, providing interim leadership and direction to the team when the Manager is unavailable.

Human Risk Management Program Evolution

Supports the shift from traditional security awareness to an adaptive, targeted, and intelligence-driven Human Risk Management program - championing adaptive training pathways, real-time behavioral triggers, and risk-based targeting in place of generic, scheduled content. Uses simulated and real-world behavioral signals to identify true high-risk populations - including repeat simulation failures, real-world malicious email clicks, and DLP-flagged policy-violation and insider-risk signals into how the program identifies and responds to human risk, not just simulation-based signals. Builds the data-backed cases for new capabilities like adaptive learning, real-time triggers, and deepfake/vishing capabilities - partnering with the Manager and leadership to prioritize the roadmap accordingly. Owns applied threat intelligence, turning raw intel into simulation themes, awareness content, and training recommendations. Partners with Data Loss Prevention (DLP) to incorporate real-world policy-violation and insider-risk signals into how the program identifies and responds to human risk, not just simulation-based signals.

Threat Intelligence & Landscape Analysi s

• Collect, evaluate, and track cyber threat intelligence from open-source (OSINT), internal, vendor, commercial, and technical channels; analyze threat actor behavior and social engineering TTPs (e.g., spear-phishing, pretexting, MFA fatigue, vishing, AI-driven impersonation, deepfakes) mapped to the MITRE ATT&CK framework.
• Deliver recurring threat-landscape briefings to team members, highlighting emerging risks relevant to associates and contractors.
• Partners closely with CTI team.

Vendor & Platform Management (ZenGuide/Proofpoint )

• Serve as the primary day-to-day point of contact for the team's dedicated simulation platform managed-service resource - directing which simulations run and what training gets delivered based on current threat intelligence and