Cybersecurity Staff Engineer | AI Security

The Home Depot

Austin (TX)

Hybrid

USD 130,000 - 180,000

Full time

5 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

The Home Depot, Inc. seeks an experienced engineer to own runtime protection for AI traffic across its AI gateway ecosystem, including Prisma AIRS and Google Model Armor.

You will tune policies by agent persona and extend protections to non-routed agents, guiding DLP implementations to prevent exfiltration of PII and payment data. You will deploy, configure, and document security architectures, and work with cross-functional teams to ensure OWASP Top 10 controls are enforced for AI-enabled

Qualifications

Minimum 8 years of hands-on experience in network and application security.

Responsibilities

Deploy the AI gateway and Prisma AIRS API with per-agent policies.
Advise on configuring DLP policies to detect and stop exfiltration of sensitive data.
Document processes for embedding Prisma AIRS API in agents not routed through the gateway.
Deploy Google Model Armor for Gemini Enterprise Agent Platform with SCC DLP.
Integrate Prisma AIRS with Koi AES for endpoint agents and MCPs.
Address OWASP Top 10 risks for LLM and agentic apps.
Troubleshoot at the application level and document architectures, policies and runbooks.

Skills

Network security

Application security

Documentation

Scripting / automation

Communication

Education

Bachelor's degree in a related field

Tools

Prisma AIRS

Google Model Armor

Koi AES

Security Command Center (SCC)

Job description

Position Purpose:

This engineer owns runtime protection for The Home Depot's agentic and AI traffic: the AI gateway, Prisma AIRS AI Runtime Security, Google Model Armor and the Koi integration.

Role summary:

You will deploy the AI gateway with Prisma AIRS AI Runtime Security API on top of it, tune policies by agent persona, and extend the same protection to agents that cannot route through the gateway. You will act as the advisory engineer for configuring DLP policies in Prisma AIRS, guiding the teams that own the data on how to detect and stop exfiltration of sensitive data. You will also deploy Google Model Armor and DLP for the Gemini Enterprise Agent Platform, and integrate Prisma AIRS with Koi AES to cover endpoint agents and MCPs.

Key Responsibilities:

Deploy the AI gateway and Prisma AIRS AI Runtime Security API on top of it, with policies configured per agent persona.

Act as the advisory engineer for configuring DLP policies in Prisma AIRS to detect and stop exfiltration of PII, credit card data and other sensitive data.

Define and document the process for embedding Prisma AIRS AI Runtime Security API, using ADK or SDK with the correct policy, in agents that cannot pass through the gateway.

Deploy Google Model Armor for the Gemini Enterprise Agent Platform with appropriate controls, and deploy DLP policies in Security Command Center (SCC).

Integrate Prisma AIRS with Koi AES for endpoint agents and MCPs, passing traffic to the gateway, and embed the API by other means where traffic does not reach the gateway.

Deploy tools and policies that address the OWASP Top 10 risks for LLM and agentic applications.

Troubleshoot at the application level, and document architectures, policies and runbooks.

Direct Manager/Direct Reports:

This position typically reports to Manager or Sr. Manager

This position has 0 Direct Reports

Travel Requirements:

No travel required.

Physical Requirements:

Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.

Working Conditions:

Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.

Minimum Qualifications:

Must be eighteen years of age or older.

Must be legally permitted to work in the United States.

Preferred Qualifications:

8+ years of hands-on experience in network security and application security, including engineering and administering gateways, proxies, firewalls or comparable enforcement platforms at enterprise scale.

Understanding of the agentic lifecycle, including how agents are built, how they call models, tools and MCP servers, and where runtime controls belong.

Experience with CI/CD pipelines and release processes, including deploying new security products and policies safely into production.

Experience deploying tools and policies to address the OWASP Top 10 for web, LLM and agentic applications.

Working knowledge of Google Cloud, including supporting AI workloads and applying controls such as Model Armor and Security Command Center DLP.

Experience integrating security controls using APIs, SDKs or agent frameworks (such as ADK), and designing fallback patterns for traffic that cannot be proxied.

Experience advising on the configuration of endpoint or DLP policies to detect and block exfiltration of PII, payment card data and other sensitive data.

Experience troubleshooting at the application level, including leading technical triage on production incidents and supporting root-cause analysis.

Experience working across multiple teams to complete tasks, with strong written and verbal communication skills.

Strong documentation skills, including architectures, policies and runbooks.

Ability to leverage AI tools to improve areas such as scripting, troubleshooting, documentation and operational efficiency while maintaining appropriate data protection and accuracy.

Preferred: experience with Prisma AIRS, AI gateways, Google Model Armor or Koi.

Preferred: previous experience leading, coaching or mentoring team members.

Minimum Education:

The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.

Preferred Education: