What are the responsibilities and job description for the Cybersecurity Sr. Engineer position at The Home Depot?
Req198329
Key Responsibilities
Key Responsibilities
- Design automation workflows and capabilities in support of data collection, investigation and incident response.
- Develop threat hunting and data analysis strategy and capabilities.
- Identify and propose new technologies, methodologies and/or approaches to detecting malicious activity.
- Utilize indicators to scope and respond proactively to emerging threats.
- Design, build, configure, maintain and monitor cybersecurity threat defense capabilities and user access management.
- Must be eighteen years of age or older.
- Must be legally permitted to work in the United States.
- Bachelor’s degree in Computer Science, Computer Engineering, Information Technology, or a related field and 5 years of progressive, post baccalaureate experience in a related occupation. Requires 5 years of experience in the following skills:
- Deploying, configuring, and managing modern stateful and next-gen firewalls, including configuring App-ID, User-ID, Content-ID (IPS/IDS, malware prevention, URL filtering), and building robust Security/NAT policies.
- Deploying and managing Palo Alto Next-Gen firewalls - both hardware and virtual series such as PA-5400s and PA-7080s
- Managing legacy environments such as “Juniper SRX 5400” and “Cisco ASA and Netscreens”
- Translating legacy config/policy rule-sets into modern, application-aware rulesets during hardware refreshes or vendor migrations.
- Managing large scale enterprise advanced routing frameworks such as SDWAN hub and spoke setups via Palo Alto firewalls.
- Managing external routing, likely peering with ISPs or connecting large WAN infrastructures and cloud environments, involves understanding autonomous systems (AS), route filtering, prefix lists, and path manipulation.
- Designing and troubleshooting complex Site-to-Site (IPsec) and Remote Access (SSL/TLS, GlobalProtect, AnyConnect) VPN tunnels across multiple data center platforms for availability.
- Modern Palo Alto firewall management using Panorama 11.0 to push configuration templates, manage Device Groups, aggregate logs, and orchestrate firmware/software upgrades across hundreds of firewalls simultaneously.
- PAN-OS features, web interface changes, and advanced routing engine capabilities.
- Advanced log management such as configuring firewalls and routers to forward Syslog data to Splunk, writing SPL (Search Processing Language) queries to hunt for security threats, tracking allowed/denied traffic patterns, and building automated alerts for anomalous behavior.
- Business Intelligence (BI) and reporting such as complex network and security data (potentially ingested from Splunk or direct APIs) and building high-level dashboards to track bandwidth utilization, threat metrics, or compliance reporting for leadership.
- Deep packet inspection (DPI) skills and ability to capture .pcap files, filter through TCP/UDP headers, analyze three-way handshakes, spot asymmetric routing, and definitively prove where a connection is dropping or experiencing latency.