Sr. Manager, Threat Engineering

Benefits

Additional Information

We are an American luxury lifestyle brand, founded in 2004. Anchored in the casual elegance of American sportswear, Tory's design philosophy is defined by effortless silhouettes, innovative materials, eclectic juxtapositions of color, and the tension of past and present. The collections include ready-to-wear, handbags, footwear, accessories, jewelry, home and beauty. Empowering women is the company's guiding principle, expressed through Tory's collections and reflected in the company culture as well as the work of the Tory Burch Foundation. Established in 2009, the Foundation provides women entrepreneurs in the United States with access to capital, education and community. You are seeking a work environment where people are encouraged to dream, explore, discover and, as important, laugh together. If you're prepared to work hard, create impact, and have fun while doing it, we would love to have you join #TeamTory. Apply today! Life @ToryBurch is Special Because: When you join us, you're joining a global, purpose-led company on an exciting growth journey with an amazing culture and great benefits. Our culture is welcoming and inclusive -- everyone is empowered to make a difference. We have the best team in the world and believe in paying competitively and rewarding for high performance. Your overall well-being is important to us; we offer generous benefits to help you take care of your mental and physical health, create financial security, and achieve wellness in all areas of your life. We love seeing our employees wear our beautiful collections. You'll receive a generous employee discount and access to exclusive sample sales. We are invested in your professional growth - you'll have access to free executive coaching on-demand. We believe in the importance of giving back and you'll have many opportunities to do just that through the Tory Burch Foundation and paid volunteer days. This Role is Tailor-Made for You Because: You are a technically authoritative security leader who understands that effective threat management is driven by identity, data movement, configuration integrity, and adversary behavior, not tool accumulation. You are fluent in modern attack paths across human and non-human identities, cloud platforms, CI/CD pipelines, ERP systems, and AI-enabled environments, and you know how to translate that understanding into operational detection, governance, and executive decision support. This role leads the Threat Engineering pillar and represents a clear technical step above traditional security engineering or SOC leadership. You are accountable for threat modeling, detection strategy, identity-centric security, data governance, privacy engineering, audit-aligned control assurance, and adversarial validation. While incident response execution is handled primarily by MSSPs, you retain authority over detection quality, escalation models, risk-based prioritization, and consequence management. A Day in the Life: You will own enterprise threat management and threat modeling, identifying relevant adversaries, tactics, techniques, and procedures and ensuring those models actively drive detection engineering, vulnerability prioritization, and governance decisions. You will apply frameworks such as MITRE ATT&CK pragmatically, with emphasis on identity-based attack paths, cloud-native threats, insider abuse, supply chain compromise, and AI-enabled abuse. You will serve as the lead authority for detection strategy across human and non-human identities, including service accounts, workloads, APIs, pipelines, and agentic systems. You will define and drive a threat capability maturity model covering detection, response, identity security, data governance, privacy, third-party risk, and crisis readiness. You will assess current state, define target maturity, and lead initiatives that measurably advance capability over time . You will ensure identity telemetry, privilege use, token issuance, and anomalous behavior are first-class detection concerns across networks, Microsoft 365, GCP, and enterprise platforms. . You will lead and mentor a Detection Engineer and partner with the Privacy, Risk & Control Engineer, ensuring threat, privacy, compliance, and audit activities are tightly integrated. You will remain hands-on in defining, validating, and tuning detections across identity, cloud, endpoint, network, application, and data layers, ensuring detections are adversary-driven, high-fidelity, and operationally actionable. You will own and actively challenge red team, purple team, and penetration testing activities, ensuring they reflect realistic adversary behavior, current threat conditions, and meaningful business impact. You will interrogate findings, validate exploit paths, and ensure outcomes drive improvements in detection, configuration, architecture, and response readiness rather than producing static reports. You will design, lead, and facilitate consequence-driven tabletop exercises focused on real thr