Tory Burch Senior Manager, Threat Management and Detection Engineering

About Tory Burch

Founded in New York in 2004, Tory Burch is an American luxury lifestyle brand distinguished by its expressive use of color, signature prints and modern interpretation of classic style. Its collections span ready-to-wear, handbags, footwear and accessories, reaching an international clientele through a global retail and digital presence. As an employer, the company offers opportunities across design, merchandising, retail, technology and corporate functions, combining creative ambition with commercial expertise. Employees contribute to a founder-led business whose identity connects personal style with purpose. Women’s empowerment remains central to this identity, notably through the Tory Burch Foundation’s support for women entrepreneurs.

Role & Responsibilities

• Own and mature the enterprise threat management program, including threat intelligence, threat modeling, detection engineering, incident response, adversarial validation, and risk-based vulnerability management.
• Identify relevant adversaries, attack techniques, and attack paths, and ensure they inform security priorities, architecture decisions, and operational activities.
• Apply frameworks such as MITRE ATT&CK to improve prevention, detection, response, and resilience.
• Define and lead detection strategy across identities, endpoints, cloud platforms, networks, applications, data environments, and AI-enabled systems.
• Ensure identity telemetry, privilege use, token issuance, abnormal access patterns, workload behavior, and data access activities are core detection concerns.
• Remain hands-on in the design, tuning, validation, and continuous improvement of threat detections and hunting capabilities.
• Lead and mentor a Detection Engineer.
• Establish and maintain a threat intelligence capability that translates emerging threats into operational improvements.
• Lead threat modeling and attack path analysis across Microsoft 365, GCP, enterprise applications, ERP platforms, CI/CD pipelines, and data environments.
• Own and actively challenge red team, purple team, penetration testing, and adversarial simulation activities to ensure findings produce measurable improvements.
• Serve as the senior technical leader during cybersecurity incidents and direct technical response activities.
• Maintain relationships with MSSPs, legal counsel, communications teams, insurance providers, and executive leadership to support effective incident management.
• Design and facilitate consequence-driven tabletop exercises that test technical, operational, legal, and executive decision-making processes.
• Own vulnerability and exposure management strategies that prioritize remediation based on exploitability, attack-path significance, identity exposure, business impact, and threat intelligence rather than severity scores alone.
• Ensure remediation focuses on vulnerabilities most likely to be exploited and cause meaningful business impact.
• Provide threat-informed guidance to architecture, cloud, infrastructure, application, and data teams.
• Assess AI-related risks, data protection concerns, and emerging technology threats.
• Partner with compliance and audit teams to ensure PCI, SOX, privacy, and regulatory controls effectively reduce cyber risk.
• Develop executive-level threat and risk reporting on detection effectiveness, incident readiness, control maturity, vulnerability exposure, and residual risk.
• Define and advance a threat capability maturity model spanning detection, response, threat intelligence, identity security, vulnerability management, and crisis preparedness.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience.
• 10+ years of progressive experience in threat engineering, threat management, incident response, detection engineering, threat intelligence, or related cybersecurity disciplines.
• Deep expertise in threat modeling, threat hunting, adversarial techniques, attack path analysis, and threat-informed defense.
• Strong technical experience across cloud security, Microsoft 365, GCP, identity and access management, non-human identities, data security, CI/CD security, application security, and vulnerability management.
• Demonstrated experience leading major cyber incident response efforts and coordinating internal and external stakeholders during critical security events.
• Experience assessing AI-related security risks, AI-enabled threats, and emerging attack techniques.
• Ability to translate technical threats and vulnerabilities into prioritized remediation and business-focused risk decisions.
• Professional certifications such as CISSP, CRISC, CIPT, CCSP, or comparable credentials are preferred.
• Offensive security certifications such as OSCP, GWAPT, GXPN, or similar are highly desirable.

Skills

Experience

10+ years of progressive experience in threat engineering, threat management, incident response, detection engineering, threat intelligence, or related cybersecurity disciplines.

Education

Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience.

Compensation

The base compensation for this position ranges from USD 165,000 to USD 200,000 per annum.

Benefits

Generous benefits supporting health, financial security, and wellness; employee discount and access to exclusive sample sales; free on-demand executive coaching; and paid volunteer days.

Culture

Tory Burch’s workplace culture reflects the brand’s entrepreneurial spirit and optimistic outlook, bringing together creative expression, commercial ambition and a collaborative approach to building a global fashion business. Its commitment to women’s empowerment gives the company a distinctive sense of purpose, connecting its identity as an employer with its broader mission to support women’s ambitions.

About Cerulean

Cerulean is the definitive career portal for the global luxury industry. We match exceptional professionals with exclusive opportunities at the world's most prestigious brands. From haute couture and fine watchmaking to prestige beauty, hospitality, and boutique retail, Cerulean centralises luxury employment to help you find the career for which you were destined.