Senior Manager, Threat Management & Detection Engineering

We are an American luxury lifestyle brand, founded in 2004. Anchored in the casual elegance of American sportswear, Tory’s design philosophy is defined by effortless silhouettes, innovative materials, eclectic juxtapositions of color, and the tension of past and present. The collections include ready-to-wear, handbags, footwear, accessories, jewelry, home and beauty. Empowering women is the company’s guiding principle, expressed through Tory’s collections and reflected in the company culture as well as the work of the Tory Burch Foundation. Established in 2009, the Foundation provides women entrepreneurs in the United States with access to capital, education and community. You are seeking a work environment where people are encouraged to dream, explore, discover and, as important, laugh together. If you’re prepared to work hard, create impact, and have fun while doing it, we would love to have you join #TeamTory. Apply today! Life @ToryBurch is Special Because: When you join us, you’re joining a global, purpose-led company on an exciting growth journey with an amazing culture and great benefits. Our culture is welcoming and inclusive -- everyone is empowered to make a difference. We have the best team in the world and believe in paying competitively and rewarding for high performance. Your overall well-being is important to us; we offer generous benefits to help you take care of your mental and physical health, create financial security, and achieve wellness in all areas of your life. We love seeing our employees wear our beautiful collections. You’ll receive a generous employee discount and access to exclusive sample sales. We are invested in your professional growth – you’ll have access to free executive coaching on-demand. We believe in the importance of giving back and you’ll have many opportunities to do just that through the Tory Burch Foundation and paid volunteer days. This Role is Tailor-Made for You Because: You are a technically authoritative cybersecurity leader who understands that modern threat management is driven by identity, data, configuration integrity, attack paths, and adversary behavior, not security tool accumulation. You have deep expertise across cloud, identity, applications, infrastructure, AI-enabled environments, and enterprise data platforms and know how to translate threat intelligence and adversary insights into meaningful detection, response, governance, and risk-management outcomes. This role leads the organization's threat management function and is accountable for threat intelligence, threat modeling, detection engineering, adversarial validation, vulnerability management, incident response, crisis readiness, and threat capability maturity. You will drive a threat-informed security program that prioritizes real-world risk while remaining hands-on in technical decision making. A Day in the Life: Lead Enterprise Threat Management Own and mature the enterprise threat management program, including threat intelligence, threat modeling, detection engineering, incident response, adversarial validation, and risk-based vulnerability management. Identify relevant adversaries, attack techniques, and attack paths and ensure they influence security priorities, architecture decisions, and operational activities. Apply frameworks such as MITRE ATT&CK pragmatically to improve prevention, detection, response, and resilience. Drive Detection Engineering & Threat Operations Define and lead detection strategy across identities, endpoints, cloud platforms, networks, applications, data environments, and AI-enabled systems. Ensure identity telemetry, privilege use, token issuance, abnormal access patterns, workload behavior, and data access activities are first-class detection concerns. Remain hands-on in the design, tuning, validation, and continuous improvement of threat detections and hunting capabilities. Lead and mentor a Detection Engineer. Own Threat Intelligence, Attack Path Analysis & Adversarial Validation Establish and maintain a threat intelligence capability that translates emerging threats into operational improvements. Lead threat modeling and attack path analysis across Microsoft 365, GCP, enterprise applications, ERP platforms, CI/CD pipelines, and data environments. Own and actively challenge red team, purple team, penetration testing, and adversarial simulation activities to ensure findings result in measurable improvements. Lead Incident Response & Crisis Readiness Serve as the senior technical leader during cybersecurity incidents and direct technical response activities. Maintain relationships with MSSPs, legal counsel, communications teams, insurance providers, and executive leadership to ensure effective incident management. Design and facilitate consequence-driven tabletop exercises that test technical, operational, legal, and executive decision-making processes. Drive Risk-Based Vulnerability Management Own vulnerability and exposure management strategies that prioritize remediation using exploitability, attack-path significance, identity exposure, business impact, and threat intelligence rather than severity scores alone. Ensure remediation efforts focus on the vulnerabilities most likely to be exploited and cause meaningful business impact. Influence Security Architecture & Governance Provide threat-informed guidance to architecture, cloud, infrastructure, application, and data teams. Assess AI-related risks, data protection concerns, and emerging technology threats. Partner with compliance and audit teams to ensure PCI, SOX, privacy, and regulatory controls effectively reduce cyber risk. Executive Reporting & Program Maturity Develop executive-level threat and risk reporting that communicates detection effectiveness, incident readiness, control maturity, vulnerability exposure, and residual risk. Define and drive a threat capability maturity model spanning detection, response, threat intellig