With a career at The Home Depot, you can be yourself and also be part of something bigger.
Position Purpose:
The Cybersecurity Staff Analyst is the team lead and most senior individual-contributor role on the Training and Awareness Team — the primary driver behind evolving our program from a traditional security awareness model, built around simulation pass/fail metrics and annual compliance training, into a mature Human Risk Management program that continuously adapts to real behavioral risk. This person operates with minimal oversight, exercises independent and sound judgment on ambiguous problems, and serves as a strong team lead and thought partner to the Manager — helping propel the team's strategy and key initiatives forward, without formal people-management authority or direct reports.
This person applies deep cyber threat intelligence (CTI) expertise to close the gap between what simulations measure and what actually drives real-world compromise — independently collecting, analyzing, and translating threat actor tactics, techniques, and procedures (TTPs), social engineering trends, and MITRE ATT&CK-mapped behavior into the timely, actionable input that shapes Simulation scenario design and Awareness campaign content, and into the case for adopting more adaptive, risk-based program capabilities.
Process and operational improvement, training advisory work, and team mentoring are responsibilities this person grows into within roughly the first six months, although demonstrated experience is required upon hire.
Key Responsibilities
100% Deliver Execution, Plans & Aligns, Develop Others - Oversee multiple projects simultaneously; Strategic partner to align solutions to customers expectations Communicate to various levels of business partners; Collaborate with stakeholders, business partners, colleagues, developers and others to deliver high quality solutions; Partner cross-functionally to define assess, communicate, implement, train and change management of projects; Lead, mentor and provide guidance to team members and partners; Serve as SME and perform research/analysis within assigned projects
Strategic Leadership
Serve as team lead for the Training and Awareness Team — providing day-to-day direction, prioritization, and technical leadership across Training, Simulation, and Awareness pillars, and acting as an informal technical resource and thought partner to analysts across all three when cross-pillar input is useful.
Act as a strategic thought partner to the Cybersecurity Manager, helping translate strategy into concrete, prioritized initiatives and ensuring key workstreams keep moving forward.
Champion and help drive forward the team's highest-priority strategic initiatives — including the Human Risk Management transformation, platform roadmap adoption, and new capability rollouts — partnering across pillars to clear blockers and keep momentum.
Serve as acting manager on an as-needed basis, providing interim leadership and direction to the team when the Manager is unavailable.
Human Risk Management Program Evolution
Supports the shift from traditional security awareness to an adaptive, targeted, and intelligence-driven Human Risk Management program — championing adaptive training pathways, real-time behavioral triggers, and risk-based targeting in place of generic, scheduled content.
Uses simulated and real-world behavioral signals to identify true high-risk populations — including repeat simulation failures, real-world malicious email clicks, and DLP-flagged policy violations such as unauthorized data handling, PII/PCI exposure, and gift card fraud indicators.
Builds the data-backed cases for new capabilities like adaptive learning, real-time triggers, and deepfake/vishing capabilities — partnering with the Manager and leadership to prioritize the roadmap accordingly.
Owns applied threat intelligence, turning raw intel into simulation themes, awareness content, and training recommendations.
Partners with Data Loss…