Position Purpose:

This engineer advises on the security posture of AI models, AI bills of materials and SaaS agents at The Home Depot, from pre-production scanning through post-production remediation.

Role summary:

You will act as the advisory engineer for AI-BOM, AI Security Posture Management (AI-SPM) and AI SaaS agent security, guiding the teams that deploy and operate these controls. You will advise on the policies that gate risky models before release, and on keeping a complete inventory of models, agents, apps and MCP servers across the enterprise. You will also stand up the program that sorts third-party AI SaaS apps into approved and unapproved and speeds up their threat modeling.

Key Responsibilities:

• 100% Deliver Execution, Plans & Align, Problem Solving – Design automation workflows and capabilities in support of data collection, investigation and incident response Develop threat hunting and data analysis strategy and capabilities Identify and propose new technologies, methodologies and/or approaches to detecting malicious activity Utilize indicators to scope and respond proactively to emerging threats Design, build, configure, maintain and monitor cybersecurity threat defense capabilities and user access management
• Act as the advisory engineer for AI-BOM, AI-SPM and AI SaaS agent security.
• Advise on pre-production model scanning in the CI/CD pipeline, including policies that block or flag risky models and a complete model inventory.
• Advise on post-production model scanning of running models, and on remediation of high and critical findings within defined SLAs.
• Advise on the AI-BOM, so that models, datasets, libraries and dependencies behind each AI system are inventoried and tracked.
• Advise on SaaS agent security tooling across all AI platforms that host SaaS agents, including policies and a complete agent inventory.
• Classify third-party AI SaaS apps as approved or unapproved, and build a repeatable program for threat modeling and security policy on those apps.
• Advise on a Shadow AI dashboard that discovers models, apps, agents and MCP servers.
• Troubleshoot issues at the application level with engineering and platform teams.
• Document standards, runbooks, policies and exceptions.

Direct Manager/Direct Reports:

• This Position typically reports to Manager or Sr. Manager
• This Position has 0 Direct Reports

Travel Requirements:

• No travel required.

Physical Requirements:

• Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.

Working Conditions:

• Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.

Minimum Qualifications:

• Must be eighteen years of age or older.
• Must be legally permitted to work in the United States.

Preferred Qualifications:

• 5+ years of hands-on experience in data security and/or application security, including engineering and administering security tooling in an enterprise environment.
• Working knowledge of how AI and ML models are developed, trained, packaged and deployed, including common model formats, registries and the risks tied to each (for example, unsafe serialization, poisoned or tampered models, and exposed secrets).
• Experience advising engineering teams on security tooling and policy, including AI-BOM, AI-SPM or comparable software supply chain and posture management practices.
• Experience with CI/CD pipelines and release processes, including integrating security scanning and policy gates into the pipeline and deploying new security products.
• Experience troubleshooting security tools and integrations at the application level, working with engineering and platform teams to resolve issues.
• Experience building and maintaining inventories and dashboards for assets such as models, applications, agents and APIs, and driving findings to remediation against defined SLAs.
• Experience working across multiple teams to complete tasks, with strong written and verbal communication skills.
• Strong documentation skills, including policies, standards, runbooks and intake procedures.
• Ability to leverage AI tools to improve areas such as scripting, analysis, documentation and operational efficiency while maintaining appropriate data protection and accuracy.
• Preferred: experience with model scanning, SaaS security posture, SBOM or AI-BOM tooling, or third-party risk and threat modeling programs.
• Preferred: previous experience leading, coaching or mentoring team members.

Minimum Education:

• The knowledge, skills and abilities typically acquired through the completion of a high school diploma and/or GED.

Preferred Education:

• No additional education

Minimum Years of Work Experience:

• 3

Preferred Years of Work Experience:

• No additional years of experience

Minimum Leadership Experience:

• None

Preferred Leadership Experience:

• None

Certifications:

• None

Competencies:

• Action Oriented
• Collaborates
• Communicates Effectively
• Customer Focus
• Drives Results