Cybersecurity Staff Engineer | AI Security

The Home Depot

United States

Remote

USD 140,000 - 190,000

Full time

5 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

The Home Depot is seeking an engineer to own runtime protection for AI traffic, including the AI gateway, Prisma AIRS AI Runtime Security API, Google Model Armor and Koi AES integrations. You will deploy and tune policies per agent persona and extend protection to non‑gateway agents.

You will serve as the advisory engineer for configuring DLP policies in Prisma AIRS, guiding teams on detecting and stopping exfiltration of sensitive data, and you will deploy security controls across Gemini

Qualifications

Bachelor’s degree or equivalent in a related field.
8+ years of hands-on experience in network security and application security.
Experience deploying gateways, proxies, firewalls or comparable enforcement platforms at enterprise scale.
Understanding of the agentic lifecycle and how agents call models, tools and MCP servers.
Experience with CI/CD pipelines and releasing security products safely into production.
Experience deploying tools to address OWASP Top 10 for web, LLM and agentic apps.
Knowledge of Google Cloud security controls (Model Armor, SCC DLP).
Experience integrating security controls via APIs/SDKs (e.g., ADK).

Responsibilities

Deploy the AI gateway and Prisma AIRS AI Runtime Security API with per-agent policies.
Advise on configuring Prisma AIRS DLP policies to detect and stop exfiltration of PII and payment data.
Document embedding of Prisma AIRS AI Runtime Security API for agents that cannot pass through the gateway.
Deploy Google Model Armor for Gemini Enterprise Agent Platform with proper controls.
Deploy DLP policies in Security Command Center (SCC).
Integrate Prisma AIRS with Koi AES for endpoints and MCPs.
Address OWASP Top 10 risks for LLM and agentic apps.
Troubleshoot at the application level and maintain runbooks and architectures.

Skills

Network security

Application security

CI/CD pipelines

Documentation

Communication

Security policies

AI gateway

Prisma AIRS

Education

Bachelor's degree

Tools

ADK

Google Model Armor

Koi AES

Prisma AIRS

Security Command Center

Job description

With a career at The Home Depot, you can be yourself and also be part of something bigger.

Position Purpose:

This engineer owns runtime protection for The Home Depot’s agentic and AI traffic: the AI gateway, Prisma AIRS AI Runtime Security, Google Model Armor and the Koi integration.

Role summary :

You will deploy the AI gateway with Prisma AIRS AI Runtime Security API on top of it, tune policies by agent persona, and extend the same protection to agents that cannot route through the gateway. You will act as the advisory engineer for configuring DLP policies in Prisma AIRS, guiding the teams that own the data on how to detect and stop exfiltration of sensitive data. You will also deploy Google Model Armor and DLP for the Gemini Enterprise Agent Platform, and integrate Prisma AIRS with Koi AES to cover endpoint agents and MCPs.

Key Responsibilities:

Deploy the AI gateway and Prisma AIRS AI Runtime Security API on top of it, with policies configured per agent persona.
Act as the advisory engineer for configuring DLP policies in Prisma AIRS to detect and stop exfiltration of PII, credit card data and other sensitive data.
Define and document the process for embedding Prisma AIRS AI Runtime Security API, using ADK or SDK with the correct policy, in agents that cannot pass through the gateway.
Deploy Google Model Armor for the Gemini Enterprise Agent Platform with appropriate controls, and deploy DLP policies in Security Command Center (SCC).
Integrate Prisma AIRS with Koi AES for endpoint agents and MCPs, passing traffic to the gateway, and embed the API by other means where traffic does not reach the gateway.
Deploy tools and policies that address the OWASP Top 10 risks for LLM and agentic applications.
Troubleshoot at the application level, and document architectures, policies and runbooks.

Direct Manager/Direct Reports:

This position typically reports to Manager or Sr. Manager
This position has 0 Direct Reports

Travel Requirements:

No travel required.

Physical Requirements:

Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.

Working Conditions:

Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.

Minimum Qualifications:

Must be eighteen years of age or older.
Must be legally permitted to work in the United States.

Preferred Qualifications:

8+ years of hands‑on experience in network security and application security, including engineering and administering gateways, proxies, firewalls or comparable enforcement platforms at enterprise scale.
Understanding of the agentic lifecycle, including how agents are built, how they call models, tools and MCP servers, and where runtime controls belong.
Experience with CI/CD pipelines and release processes, including deploying new security products and policies safely into production.
Experience deploying tools and policies to address the OWASP Top 10 for web, LLM and agentic applications.
Working knowledge of Google Cloud, including supporting AI workloads and applying controls such as Model Armor and Security Command Center DLP.
Experience integrating security controls using APIs, SDKs or agent frameworks (such as ADK), and designing fallback patterns for traffic that cannot be proxied.
Experience advising on the configuration of endpoint or DLP policies to detect and block exfiltration of PII, payment card data and other sensitive data.
Experience troubleshooting at the application level, including leading technical triage on production incidents and supporting root‑cause analysis.
Experience working across multiple teams to complete tasks, with strong written and verbal communication skills.
Strong documentation skills, including architectures, policies and runbooks.
Ability to leverage AI tools to improve areas such as scripting, troubleshooting, documentation and operational efficiency while maintaining appropriate data protection and accuracy.
Preferred: experience with Prisma AIRS, AI gateways, Google Model Armor or Koi.
Preferred: previous experience leading, coaching or mentoring team members.

Minimum Education:

The knowledge, skills and abilities typically acquired through the completion of a bachelor’s degree program or equivalent degree in a field of study related to the job.

Preferred Education: