Cybersecurity Engineer II, Product Security (REMOTE)

The Home Depot is seeking a Cybersecurity Engineer II to serve as a dedicated security partner for a specific business portfolio. In this role, you will build a "Secure Flow" to integrate security into the developer workflow and establish a scalable operating model to ensure applications are visible, assessed, and secured.

Responsibilities:

• Collaborate with Enterprise Technology to configure and integrate cybersecurity systems that mitigate risk
• Troubleshoot and quickly resolve escalated incidents
• Design, build, configure, maintain, monitor cybersecurity threat defense capabilities and user access management
• Coordinate integration and collaboration with managed security providers
• Investigate and recommend corrective actions related to incidents

Requirements:

• Must be eighteen years of age or older
• Must be legally permitted to work in the United States
• 3–5 years of experience in Product Security, Application Security (AppSec), or DevSecOps
• Hands-on experience integrating and managing security scanning tools such as SAST, DAST, and secret scanning within CI/CD pipelines and source code repositories
• Experience conducting threat modeling for applications and identifying design-level security risks
• Ability to interpret security tool findings and partner with engineering teams to remediate Critical and High-risk vulnerabilities
• Strong communication skills with the ability to clearly explain technical security risks to non-security stakeholders
• Experience with SaaS Security Posture Management (SSPM) tools and validating security coverage across a SaaS application portfolio
• Proficiency with formal threat modeling methodologies such as STRIDE, PASTA, or similar frameworks
• Experience working closely with architects and engineering leaders to influence secure design decisions early in the development lifecycle
• Demonstrated ability to build trusted relationships with engineering and product stakeholders and promote a 'Secure from Start' mindset
• Experience maintaining security metrics or scorecards and presenting security posture and remediation progress to leadership or portfolio stakeholders
• Strong ability to position security as an enabler of developer velocity and business outcomes, not just risk reduction