Cybersecurity Staff Engineer | AI Security

The Home Depot

Austin (TX)

On-site

USD 150,000 - 190,000

Full time

2 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

The Home Depot is seeking an experienced security engineer to own runtime protection for its agentic and AI traffic, including the AI gateway, Prisma AIRS AI Runtime Security API, and Koi AES integration. You will deploy and tune policies by agent persona, advise on DLP configurations for PII and payment data, and extend protections to endpoints and MCPs across Google Cloud workloads.

The role requires collaboration, meticulous documentation, and a bachelor’s degree as a minimum, with no travel

Qualifications

Must be eighteen years of age or older.
Must be legally permitted to work in the United States.

Responsibilities

Deploy the AI gateway and Prisma AIRS runtime API with per-agent policies.
Advise on configuring DLP policies to detect exfiltration of PII and card data.
Document the process for embedding Prisma AIRS AI Runtime Security API in agents without gateway.
Deploy Google Model Armor for Gemini Enterprise Agent Platform with proper controls.
Integrate Prisma AIRS with Koi AES for endpoint agents and MCPs.
Address OWASP Top 10 risks for LLM and agentic apps with tools and policies.
Troubleshoot at the application layer and document architectures and runbooks.

Skills

Network security

Application security

CI/CD pipelines

Communication skills

Documentation

Education

Bachelor's degree

Tools

Prisma AIRS

Google Model Armor

Koi AES

Security Command Center

Job description

Position Purpose

This engineer owns runtime protection for The Home Depot's agentic and AI traffic: the AI gateway, Prisma AIRS AI Runtime Security, Google Model Armor and the Koi integration.

Req197422

Position Purpose

This engineer owns runtime protection for The Home Depot's agentic and AI traffic: the AI gateway, Prisma AIRS AI Runtime Security API on top of it, tune policies by agent persona, and extend the same protection to agents that cannot route through the gateway.

Role Summary

You will deploy the AI gateway with Prisma AIRS AI Runtime Security API on top of it, tune policies by agent persona, and extend the same protection to agents that cannot route through the gateway. You will act as the advisory engineer for configuring DLP policies in Prisma AIRS, guiding the teams that own the data on how to detect and stop exfiltration of sensitive data. You will also deploy Google Model Armor and DLP for the Gemini Enterprise Agent Platform, and integrate Prisma AIRS with Koi AES to cover endpoint agents and MCPs.

Key Responsibilities

Deploy the AI gateway and Prisma AIRS AI Runtime Security API on top of it, with policies configured per agent persona.
Act as the advisory engineer for configuring DLP policies in Prisma AIRS to detect and stop exfiltration of PII, credit card data and other sensitive data.
Define and document the process for embedding Prisma AIRS AI Runtime Security API, using ADK or SDK with the correct policy, in agents that cannot pass through the gateway.
Deploy Google Model Armor for the Gemini Enterprise Agent Platform with appropriate controls, and deploy DLP policies in Security Command Center (SCC).
Integrate Prisma AIRS with Koi AES for endpoint agents and MCPs, passing traffic to the gateway, and embed the API by other means where traffic does not reach the gateway.
Deploy tools and policies that address the OWASP Top 10 risks for LLM and agentic applications.
Troubleshoot at the application level, and document architectures, policies and runbooks.

Direct Manager/Direct Reports

This position typically reports to Manager or Sr. Manager
This position has 0 Direct Reports

Travel Requirements

No travel required.

Physical Requirements

Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.

Working Conditions

Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.

Minimum Qualifications

Must be eighteen years of age or older.
Must be legally permitted to work in the United States.

Preferred Qualifications

8+ years of hands-on experience in network security and application security, including engineering and administering gateways, proxies, firewalls or comparable enforcement platforms at enterprise scale.
Understanding of the agentic lifecycle, including how agents are built, how they call models, tools and MCP servers, and where runtime controls belong.
Experience with CI/CD pipelines and release processes, including deploying new security products and policies safely into production.
Experience deploying tools and policies to address the OWASP Top 10 for web, LLM and agentic applications.
Working knowledge of Google Cloud, including supporting AI workloads and applying controls such as Model Armor and Security Command Center DLP.
Experience integrating security controls using APIs, SDKs or agent frameworks (such as ADK), and designing fallback patterns for traffic that cannot be proxied.
Experience advising on the configuration of endpoint or DLP policies to detect and block exfiltration of PII, payment card data and other sensitive data.
Experience troubleshooting at the application level, including leading technical triage on production incidents and supporting root-cause analysis.
Experience working across multiple teams to complete tasks, with strong written and verbal communication skills.
Strong documentation skills, including architectures, policies and runbooks.
Ability to leverage AI tools to improve areas such as scripting, troubleshooting, documentation and operational efficiency while maintaining appropriate data protection and accuracy.
Preferred: experience with Prisma AIRS, AI gateways, Google Model Armor or Koi.
Preferred: previous experience leading, coaching or mentoring team members.

Minimum Education

The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.

Preferred Education