Cybersecurity Sr. Engineer

About the job

With a career at The Home Depot, you can be yourself and also be part of something bigger.

Key Responsibilities: • Design automation workflows and capabilities in support of data collection, investigation and incident response. • Develop threat hunting and data analysis strategy and capabilities. • Identify and propose new technologies, methodologies and/or approaches to detecting malicious activity. • Utilize indicators to scope and respond proactively to emerging threats. • Design, build, configure, maintain and monitor cybersecurity threat defense capabilities and user access management.

Minimum Qualifications: • Must be eighteen years of age or older. • Must be legally permitted to work in the United States. • Bachelor’s degree in Computer Science, Computer Engineering, Information Technology, or a related field and 5 years of progressive, post baccalaureate experience in a related occupation. Requires 5 years of experience in the following skills: • Deploying, configuring, and managing modern stateful and next-gen firewalls, including configuring App-ID, User-ID, Content-ID (IPS/IDS, malware prevention, URL filtering), and building robust Security/NAT policies. • Deploying and managing Palo Alto Next-Gen firewalls - both hardware and virtual series such as PA-5400s and PA-7080s • Managing legacy environments such as “Juniper SRX 5400” and “Cisco ASA and Netscreens” • Translating legacy config/policy rule-sets into modern, application-aware rulesets during hardware refreshes or vendor migrations. • Managing large scale enterprise advanced routing frameworks such as SDWAN hub and spoke setups via Palo Alto firewalls. • Managing external routing, likely peering with ISPs or connecting large WAN infrastructures and cloud environments, involves understanding autonomous systems (AS), route filtering, prefix lists, and path manipulation. • Designing and troubleshooting complex Site-to-Site (IPsec) and Remote Access (SSL/TLS, GlobalProtect, AnyConnect) VPN tunnels across multiple data center platforms for availability. • Modern Palo Alto firewall management using Panorama 11.0 to push configuration templates, manage Device Groups, aggregate logs, and orchestrate firmware/software upgrades across hundreds of firewalls simultaneously. • PAN-OS features, web interface changes, and advanced routing engine capabilities. • Advanced log management such as configuring firewalls and routers to forward Syslog data to Splunk, writing SPL (Search Processing Language) queries to hunt for security threats, tracking allowed/denied traffic patterns, and building automated alerts for anomalous behavior. • Business Intelligence (BI) and reporting such as complex network and security data (potentially ingested from Splunk or direct APIs) and building high-level dashboards to track bandwidth utilization, threat metrics, or compliance reporting for leadership. • Deep packet inspection (DPI) skills and ability to capture .pcap files, filter through TCP/UDP headers, analyze three-way handshakes, spot asymmetric routing, and definitively prove where a connection is dropping or experiencing latency.