Infrastructure Security Engineer – Threat Modelling

Join a high-impact security initiative focused on building a comprehensive threat model for an enterprise on-premises data and AI appliance. This role is ideal for an infrastructure security professional who enjoys translating complex architecture into clear, structured security artifacts and working closely with cross-functional teams to strengthen platform resilience.
Responsibilities
Analyze the appliance architecture across hardware, operating systems, networking, storage, identity, and virtualization layers to identify security risks and threat scenarios.
Build and maintain threat model components, data flows, trust boundaries, and modules in a dedicated threat modeling tool.
Expand coverage for hardware-related components where existing models are more software-centric.
Partner with platform architects to review diagrams, system documentation, and technical details to accurately represent the environment.
Collaborate with engineering security and corporate security stakeholders to align threat modeling structure, libraries, and countermeasures with internal standards.
Develop a cohesive threat model that brings together both hardware and software elements into a defensible overall security view.
Identify gaps in current model content and help close those gaps through interviews, documentation review, and iterative updates.
Prepare clear documentation and status updates to support reviews and move artifacts toward approved and released status.
Skills
7+ years of experience in infrastructure security, platform security, or a related discipline.
Hands-on experience securing on-premises or private cloud environments.
Depth in two or more areas such as operating systems, networking, compute/storage hardware, identity and PKI/key management, virtualization, or Kubernetes.
Practical experience with structured threat modeling methods such as STRIDE or equivalent.
Experience using a dedicated threat modeling platform such as IriusRisk, ThreatModeler, Microsoft Threat Modeling Tool, or similar.
Ability to assess infrastructure and identify real threats across both hardware and software components.
Strong communication skills with the ability to translate technical architecture into organized threat model artifacts.
Comfort working across architecture, engineering, and security teams to gather information and keep work moving forward.
Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
Preferred Skills
Hands-on experience with IriusRisk, including component libraries, review workflows, and artifact management.
Experience building threat models for appliance-based or tightly integrated hardware/software platforms.
Familiarity with enterprise on-premises data or AI platform environments.
Experience securing virtualization layers, container orchestration platforms, or bare-metal infrastructure.
Background in identity, PKI, or secrets management as applied to infrastructure security.
Experience working alongside corporate security or product security teams.
Exposure to security compliance frameworks relevant to enterprise on-premises deployments.
Horizontal is committed to fostering a diverse, equitable, and inclusive workplace where different perspectives are valued and respected. We welcome candidates from all backgrounds and encourage you to apply if this opportunity aligns with your skills and interests.
By applying for this position, you acknowledge and agree that Horizontal Talent may contact you regarding your application using automated technology, including phone calls, SMS/text messages, or email, which may be delivered by our virtual AI recruiter, Alex.

Work arrangement
Yes