> Markdown version of [/jobs/ext/4311756-infrastructure-security-engineer-threat-modelling](https://www.wearedevelopers.com/jobs/ext/4311756-infrastructure-security-engineer-threat-modelling). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Infrastructure Security Engineer - Threat Modelling

- **Company:** Horizontal Talent
- **Location:** San Diego, CA, United States
- **Experience:** Expert
- **Salary:** $78,000.0 - $101,005.0
- **Contract:** Permanent contract
- **Skills:** Computing Platforms, Software Documentation, Cyber Security, Key Management, Public Key Infrastructure, Data Streaming, Cloud Platform System, AI Platforms, Material UI, Kubernetes, Storage Technologies, Information Technology, Bare Metal
- **Published:** October 17, 2026
- **Apply:** https://www.jofdav.com/jobs/60148602-infrastructure-security-engineer-threat-modelling

## About the Role

* 7+ years of experience in infrastructure security, platform security, or a related discipline.
 * Hands-on experience securing on-premises or private cloud environments.
 * Depth in two or more areas such as operating systems, networking, compute/storage hardware, identity and PKI/key management, virtualization, or Kubernetes.
 * Practical experience with structured threat modeling methods such as STRIDE or equivalent.
 * Experience using a dedicated threat modeling platform such as IriusRisk, ThreatModeler, Microsoft Threat Modeling Tool, or similar.
 * Ability to assess infrastructure and identify real threats across both hardware and software components.
 * Strong communication skills with the ability to translate technical architecture into organized threat model artifacts.
 * Comfort working across architecture, engineering, and security teams to gather information and keep work moving forward.
 * Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.

Preferred Skills

 * Hands-on experience with IriusRisk, including component libraries, review workflows, and artifact management.
 * Experience building threat models for appliance-based or tightly integrated hardware/software platforms.
 * Familiarity with enterprise on-premises data or AI platform environments.
 * Experience securing virtualization layers, container orchestration platforms, or bare-metal infrastructure.
 * Background in identity, PKI, or secrets management as applied to infrastructure security.
 * Experience working alongside corporate security or product security teams.
 * Exposure to security compliance frameworks relevant to enterprise on-premises deployments.

Horizontal is committed to fostering a diverse, equitable, and inclusive workplace where different perspectives are valued and respected. We welcome candidates from all backgrounds and encourage you to apply if this opportunity aligns with your skills and interests.

## Description

Join a high-impact security initiative focused on building a comprehensive threat model for an enterprise on-premises data and AI appliance. This role is ideal for an infrastructure security professional who enjoys translating complex architecture into clear, structured security artifacts and working closely with cross-functional teams to strengthen platform resilience.
Responsibilities

 * Analyze the appliance architecture across hardware, operating systems, networking, storage, identity, and virtualization layers to identify security risks and threat scenarios.
 * Build and maintain threat model components, data flows, trust boundaries, and modules in a dedicated threat modeling tool.
 * Expand coverage for hardware-related components where existing models are more software-centric.
 * Partner with platform architects to review diagrams, system documentation, and technical details to accurately represent the environment.
 * Collaborate with engineering security and corporate security stakeholders to align threat modeling structure, libraries, and countermeasures with internal standards.
 * Develop a cohesive threat model that brings together both hardware and software elements into a defensible overall security view.
 * Identify gaps in current model content and help close those gaps through interviews, documentation review, and iterative updates.
 * Prepare clear documentation and status updates to support reviews and move artifacts toward approved and released status.