Cybersecurity Staff Engineer | AI Security

This engineer owns runtime protection for The Home Depot's agentic and AI traffic: the AI gateway, Prisma AIRS AI Runtime Security, Google Model Armor and the Koi integration.

You will deploy the AI gateway with Prisma AIRS AI Runtime Security API on top of it, tune policies by agent persona, and extend the same protection to agents that cannot route through the gateway. You will act as the advisory engineer for configuring DLP policies in Prisma AIRS, guiding the teams that own the data on how to detect and stop exfiltration of sensitive data.

You will also deploy Google Model Armor and DLP for the Gemini Enterprise Agent Platform, and integrate Prisma AIRS with Koi AES to cover endpoint agents and MCPs.

• Deploy the AI gateway and Prisma AIRS AI Runtime Security API on top of it, with policies configured per agent persona.
• Act as the advisory engineer for configuring DLP policies in Prisma AIRS to detect and stop exfiltration of PII, credit card data and other sensitive data.
• Define and document the process for embedding Prisma AIRS AI Runtime Security API, using ADK or SDK with the correct policy, in agents that cannot pass through the gateway.
• Deploy Google Model Armor for the Gemini Enterprise Agent Platform with appropriate controls, and deploy DLP policies in Security Command Center (SCC).
• Integrate Prisma AIRS with Koi AES for endpoint agents and MCPs, passing traffic to the gateway, and embed the API by other means where traffic does not reach the gateway.
• Deploy tools and policies that address the OWASP Top 10 risks for LLM and agentic applications.
• Troubleshoot at the application level, and document architectures, policies and runbooks.

• This position typically reports to Manager or Sr. Manager
• This position has 0 Direct Reports

• No travel required.

• Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.

• Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.

• Must be eighteen years of age or older.
• Must be legally permitted to work in the United States.

• 8+ years of hands-on experience in network security and application security, including engineering and administering gateways, proxies, firewalls or comparable enforcement platforms at enterprise scale.
• Understanding of the agentic lifecycle, including how agents are built, how they call models, tools and MCP servers, and where runtime controls belong.
• Experience with CI/CD pipelines and release processes, including deploying new security products and policies safely into production.
• Experience deploying tools and policies to address the OWASP Top 10 for web, LLM and agentic applications.
• Working knowledge of Google Cloud, including supporting AI workloads and applying controls such as Model Armor and Security Command Center DLP.
• Experience integrating security controls using APIs, SDKs or agent frameworks (such as ADK), and designing fallback patterns for traffic that cannot be proxied.
• Experience advising on the configuration of endpoint or DLP policies to detect and block exfiltration of PII, payment card data and other sensitive data.
• Experience troubleshooting at the application level, including leading technical triage on production incidents and supporting root-cause analysis.
• Experience working across multiple teams to complete tasks, with strong written and verbal communication skills.
• Strong documentation skills, including architectures, policies and runbooks.
• Ability to leverage AI…