Cybersecurity Staff Engineer | AI Security

Employer description

With a career at The Home Depot, you can be yourself and also be part of something bigger.

Position Purpose:

This engineer owns runtime protection for The Home Depot’s agentic and AI traffic: the AI gateway, Prisma AIRS AI Runtime Security, Google Model Armor and the Koi integration.

Role summary:

You will deploy the AI gateway with Prisma AIRS AI Runtime Security API on top of it, tune policies by agent persona, and extend the same protection to agents that cannot route through the gateway. You will act as the advisory engineer for configuring DLP policies in Prisma AIRS, guiding the teams that own the data on how to detect and stop exfiltration of sensitive data. You will also deploy Google Model Armor and DLP for the Gemini Enterprise Agent Platform, and integrate Prisma AIRS with Koi AES to cover endpoint agents and MCPs.

Key Responsibilities:

Deploy the AI gateway and Prisma AIRS AI Runtime Security API on top of it, with policies configured per agent persona.Act as the advisory engineer for configuring DLP policies in Prisma AIRS to detect and stop exfiltration of PII, credit card data and other sensitive data.Define and document the process for embedding Prisma AIRS AI Runtime Security API, using ADK or SDK with the correct policy, in agents that cannot pass through the gateway.Deploy Google Model Armor for the Gemini Enterprise Agent Platform with appropriate controls, and deploy DLP policies in Security Command Center (SCC).Integrate Prisma AIRS with Koi AES for endpoint agents and MCPs, passing traffic to the gateway, and embed the API by other means where traffic does not reach the gateway.Deploy tools and policies that address the OWASP Top 10 risks for LLM and agentic applications.Troubleshoot at the application level, and document architectures, policies and runbooks.
Direct Manager/Direct Reports:

This position typically reports to Manager or Sr. ManagerThis position has 0 Direct Reports
Travel Requirements:

No travel required.
Physical Requirements:

Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.
Working Conditions:

Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.
Minimum Qualifications:

Must be eighteen years of age or older.Must be legally permitted to work in the United States.
Preferred Qualifications:

8+ years of hands-on experience in network security and application security, including engineering and administering gateways, proxies, firewalls or comparable enforcement platforms at enterprise scale.Understanding of the agentic lifecycle, including how agents are built, how they call models, tools and MCP servers, and where runtime controls belong.Experience with CI/CD pipelines and release processes, including deploying new security products and policies safely into production.Experience deploying tools and policies to address the OWASP Top 10 for web, LLM and agentic applications.Working knowledge of Google Cloud, including supporting AI workloads and applying controls such as Model Armor and Security Command Center DLP.Experience integrating security controls using APIs, SDKs or agent frameworks (such as ADK), and designing fallback patterns for traffic that cannot be proxied.Experience advising on the configuration of endpoint or DLP policies to detect and block exfiltration of PII, payment card data and other sensitive data.Experience troubleshooting at the application level, including leading technical triage on production incidents and supporting root-cause analysis.Experience working across multiple teams to complete tasks, with strong written and verbal communication skills.Strong documentation skills, including architectures, policies and runbooks.Ability to leverage AI tools to improve areas such as scripting, troubleshooting, documentation and operational efficiency while maintaining appropriate data protection and accuracy.Preferred: experience with Prisma AIRS, AI gateways, Google Model Armor or Koi.Preferred: previous experience leading, coaching or mentoring team members.
Minimum Education:

The knowledge, skills and abilities typically acquired through the completion of a bachelor’s degree program or equivalent degree in a field of study related to the job.
Preferred Education:

No additional education
Minimum Years of Work Experience:

8
Preferred Years of Work Experience:

No additional years of experience
Minimum Leadership Experience:

None
Preferred Leadership Experience:

None
Certifications:

None
Competencies:

Action OrientedCollaboratesDrives EngagementCommunicates EffectivelyCustomer FocusDrives ResultsManages Conflict
For California, Colorado, Connecticut, Rhode Island, Nevada, New York City, Ithaca (NY), Westchester County (NY), and Washington residents:
 

The pay range for this position is between $140,000.00 - $190,000.00