Cybersecurity Staff Engineer | AI Security
About The Position
This engineer owns runtime protection for The Home Depot’s agentic and AI traffic, including the AI gateway, Prisma AIRS AI Runtime Security, Google Model Armor, and the Koi integration. The role deploys and configures runtime security controls for agents, Gemini Enterprise Agent Platform workloads, endpoint agents, and MCPs. It also advises teams on DLP policy configuration, defines integration patterns for agents that cannot route through the gateway, addresses OWASP Top 10 risks for LLM and agentic applications, and troubleshoots application-level issues. The engineer documents architectures, policies, and runbooks. The position typically reports to a Manager or Sr. Manager and has no direct reports. No travel is required. Work takes place in a comfortable indoor area; most time is spent sitting, with frequent opportunities to move about and rare need to move or lift light articles.
Requirements
- Must be at least 18 years of age.
- Must be legally permitted to work in the United States.
- Bachelor’s degree or equivalent in a field related to the job, or knowledge, skills, and abilities typically acquired through completing such a program.
- At least 8 years of work experience.
- Ability to work across multiple teams, with strong written and verbal communication skills.
- Strong documentation skills, including architectures, policies, and runbooks.
- Ability to use AI tools to improve scripting, troubleshooting, documentation, and operational efficiency while maintaining appropriate data protection and accuracy.
Nice To Haves
- 8+ years of hands-on experience in network security and application security, including engineering and administering gateways, proxies, firewalls, or comparable enterprise-scale enforcement platforms.
- Understanding of the agentic lifecycle, including how agents are built, call models, tools, and MCP servers, and where runtime controls belong.
- Experience with CI/CD pipelines and release processes, including safely deploying security products and policies into production.
- Experience deploying tools and policies addressing the OWASP Top 10 for web, LLM, and agentic applications.
- Working knowledge of Google Cloud, including support for AI workloads and controls such as Model Armor and Security Command Center DLP.
- Experience integrating security controls using APIs, SDKs, or agent frameworks such as ADK, and designing fallback patterns for traffic that cannot be proxied.
- Experience advising on endpoint or DLP policy configuration to detect and block exfiltration of PII, payment card data, and other sensitive data.
- Experience troubleshooting at the application level, leading technical triage on production incidents, and supporting root-cause analysis.
- Experience with Prisma AIRS, AI gateways, Google Model Armor, or Koi.
- Previous experience leading, coaching, or mentoring team members.
Responsibilities
- Deploy the AI gateway and Prisma AIRS AI Runtime Security API, configuring policies by agent persona.
- Advise teams on configuring Prisma AIRS DLP policies to detect and stop exfiltration of PII, credit card data, and other sensitive information.
- Define and document how to embed Prisma AIRS AI Runtime Security API using ADK or an SDK with the correct policy in agents that cannot pass through the gateway.
- Deploy Google Model Armor for the Gemini Enterprise Agent Platform and deploy DLP policies in Security Command Center (SCC).
- Integrate Prisma AIRS with Koi AES for endpoint agents and MCPs, routing traffic to the gateway and embedding the API by other means when traffic does not reach the gateway.
- Deploy tools and policies addressing OWASP Top 10 risks for LLM and agentic applications.
- Troubleshoot at the application level and document architectures, policies, and runbooks.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
