Cybersecurity Sr. Engineer

With a career at The Home Depot, you can be yourself and also be part of something bigger.

Key Responsibilities:
• Design automation workflows and capabilities in support of data collection, investigation and incident response.
• Develop threat hunting and data analysis strategy and capabilities.
• Identify and propose new technologies, methodologies and/or approaches to detecting malicious activity.
• Utilize indicators to scope and respond proactively to emerging threats.
• Design, build, configure, maintain and monitor cybersecurity threat defense capabilities and user access management.
Minimum Qualifications:
• Must be eighteen years of age or older.
• Must be legally permitted to work in the United States.
• Bachelor’s degree in Computer Science, Computer Engineering, Information Technology, or a related field and 5 years of progressive, post baccalaureate experience in a related occupation. Requires 5 years of experience in the following skills:
• Deploying, configuring, and managing modern stateful and next-gen firewalls, including configuring App-ID, User-ID, Content-ID (IPS/IDS, malware prevention, URL filtering), and building robust Security/NAT policies.
• Deploying and managing Palo Alto Next-Gen firewalls - both hardware and virtual series such as PA-5400s and PA-7080s
• Managing legacy environments such as “Juniper SRX 5400” and “Cisco ASA and Netscreens”
• Translating legacy config/policy rule-sets into modern, application-aware rulesets during hardware refreshes or vendor migrations.
• Managing large scale enterprise advanced routing frameworks such as SDWAN hub and spoke setups via Palo Alto firewalls.
• Managing external routing, likely peering with ISPs or connecting large WAN infrastructures and cloud environments, involves understanding autonomous systems (AS), route filtering, prefix lists, and path manipulation.
• Designing and troubleshooting complex Site-to-Site (IPsec) and Remote Access (SSL/TLS, GlobalProtect, AnyConnect) VPN tunnels across multiple data center platforms for availability.
• Modern Palo Alto firewall management using Panorama 11.0 to push configuration templates, manage Device Groups, aggregate logs, and orchestrate firmware/software upgrades across hundreds of firewalls simultaneously.
• PAN-OS features, web interface changes, and advanced routing engine capabilities.
• Advanced log management such as configuring firewalls and routers to forward Syslog data to Splunk, writing SPL (Search Processing Language) queries to hunt for security threats, tracking allowed/denied traffic patterns, and building automated alerts for anomalous behavior.
• Business Intelligence (BI) and reporting such as complex network and security data (potentially ingested from Splunk or direct APIs) and building high-level dashboards to track bandwidth utilization, threat metrics, or compliance reporting for leadership.
• Deep packet inspection (DPI) skills and ability to capture .pcap files, filter through TCP/UDP headers, analyze three-way handshakes, spot asymmetric routing, and definitively prove where a connection is dropping or experiencing latency.