Senior AI Security Engineer: AI-BOM & SPM Advisor

The Home Depot; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

The Home Depot is seeking an advisory engineer to secure AI models, AI-BOM, and SaaS agents across pre- and post-production stages. You will guide policies that gate risky models and maintain an enterprise-wide inventory of models, apps, and MCP servers.

You will help build a program to categorize third-party AI SaaS apps, accelerate threat modeling, and support a Shadow AI dashboard for discovery and remediation within defined SLAs.

Qualifications

• 3+ years of hands-on experience in data security and/or application security.
• Working knowledge of how AI and ML models are developed, trained, packaged and deployed, including model formats and risks.
• Experience advising engineering teams on security tooling and policy, including AI-BOM/AI-SPM or similar software supply chain practices.
• Experience with CI/CD pipelines and release processes, including integrating security scanning and policy gates.
• Experience troubleshooting security tools at the application level with engineering teams.

Responsibilities

• Design automation workflows for data collection, investigation and incident response.
• Develop threat hunting and data analysis strategy and capabilities.
• Advise on AI-BOM, AI-SPM and AI SaaS agent security.
• Advise on pre-production model scanning in CI/CD pipelines and on model inventory.
• Advise on post-production model scanning and remediation within SLAs.
• Maintain inventories and dashboards for models, apps, agents and APIs.
• Classify third-party AI SaaS apps as approved or unapproved and create policy.

Skills

Data security

Application security

AI security

Threat modeling

Security policies

Education

High school diploma or GED

Tools

CI/CD tooling

SBOM/AI-BOM tooling

Vulnerability management tools

Job description

The Home Depot is seeking an advisory engineer to secure AI models, AI-BOM, and SaaS agents across pre- and post-production stages. You will guide policies that gate risky models and maintain an enterprise-wide inventory of models, apps, and MCP servers.

You will help build a program to categorize third-party AI SaaS apps, accelerate threat modeling, and support a Shadow AI dashboard for discovery and remediation within defined SLAs.