Senior AI Security Engineer - AI-BOM & SPM Lead

The Home Depot; Atlanta (GA); On-site; USD 120,000 - 160,000; Full time

Job summary

The Home Depot is seeking an advisory engineer to guide AI security across models, SaaS agents, and MCP servers. You will shape pre- and post-production scanning policies, maintain a complete inventory of models, apps, and agents, and drive remediation under defined SLAs.

You will lead security tooling and posture management programs, advise engineering teams, and build repeatable threat modeling processes across the enterprise. Strong collaboration and documentation are essential.

Qualifications

• 3+ years of hands-on experience in data security and/or application security.
• Experience advising engineering teams on security tooling and policy, including AI-BOM, AI-SPM or comparable software supply chain and posture management practices.
• Experience with CI/CD pipelines and release processes, including security scanning and policy gates.
• Experience building inventories and dashboards for assets such as models, apps, agents and APIs, and driving remediation against defined SLAs.
• Strong written and verbal communication skills.

Responsibilities

• Design automation workflows and capabilities in support of data collection, investigation and incident response.
• Develop threat hunting and data analysis strategy and capabilities.
• Advise on pre-production model scanning in the CI/CD pipeline, including policies that block or flag risky models and a complete model inventory.
• Advise on post-production model scanning of running models, and on remediation of high and critical findings within defined SLAs.
• Advise on the AI-BOM, so that models, datasets, libraries and dependencies behind each AI system are inventoried and tracked.
• Advise on SaaS agent security tooling across all AI platforms that host SaaS agents, including policies and a complete agent inventory.
• Classify third-party AI SaaS apps as approved or unapproved, and build a repeatable program for threat modeling and security policy on those apps.
• Advise on a Shadow AI dashboard that discovers models, apps, agents and MCP servers.
• Troubleshoot issues at the application level with engineering and platform teams.
• Document standards, runbooks, policies and exceptions.

Skills

Data security

Application security

Security tooling

AI-BOM

AI-SPM

Threat modeling

Inventory management

Dashboards

Cross-team collaboration

Documentation

Education

High school diploma or GED

Tools

CI/CD tooling

Security scanning tools

SBOM tooling

AI model scanning tools

Job description

The Home Depot is seeking an advisory engineer to guide AI security across models, SaaS agents, and MCP servers. You will shape pre- and post-production scanning policies, maintain a complete inventory of models, apps, and agents, and drive remediation under defined SLAs.

You will lead security tooling and posture management programs, advise engineering teams, and build repeatable threat modeling processes across the enterprise. Strong collaboration and documentation are essential.