Infrastructure Security Engineer – Threat Modeling

The hiring client is confidential. The Infrastructure Security Engineer will develop and maintain a threat model for the Teradata AI Factory platform, documenting threats across its infrastructure layers and coordinating with architects, engineering, and security teams.

Responsibilities:

• Identify, assess, and document threats across hardware, operating systems, networking, storage, identity, and virtualization layers
• Develop threat model components, data flows, and modules using IriusRisk, with a focus on hardware components
• Collaborate with platform architects to accurately represent system architecture within the threat modeling tool
• Coordinate with engineering and corporate security teams to align threat model structures and countermeasures
• Maintain and refine the overarching threat model for the Teradata AI Factory appliance
• Produce clear documentation and status updates to support review cycles

Requirements:

• 7 years of experience in infrastructure or platform security, with depth in on-premises or private cloud environments
• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience
• Hands-on experience securing on-premises or private cloud environments, with expertise in two or more areas: operating systems, networking, compute and storage hardware, identity/PKI/key management, virtualization, or Kubernetes
• Practical experience with structured threat modeling methodologies (e.g., STRIDE) and tools like IriusRisk
• Strong cross-team collaboration and communication skills
• Hands-on experience with IriusRisk, including component library management and artifact management
• Experience building threat models for appliance-based platforms
• Familiarity with enterprise on-premises data or AI platform environments
• Experience securing virtualization layers, container orchestration platforms, or bare-metal infrastructure
• Background in identity, PKI, or secrets management
• Exposure to security compliance frameworks relevant to enterprise on-premises deployments