Senior Threat Engineering Lead — Strategy, Detection & Maturity

BoF Careers; Jersey City (NJ); On-site; USD 165,000 - 200,000; Full time

Job summary

Tory Burch is seeking a senior security engineering leader to own enterprise threat management and risk-based detection. You will translate threat insights into governance decisions, drive MITRE ATT&CK-based detection across identity and cloud environments, and lead a team advancing detection maturity while integrating privacy and compliance considerations.

You will collaborate with executive leadership to ensure crisis readiness, incident response, and continuous improvement, shaping the

Qualifications

• Bachelor's degree in computer science, engineering, information security, or equivalent practical experience.
• 10+ years of progressive experience in threat engineering, detection engineering, advanced security engineering, or closely related roles in complex cloud and identity-centric environments.
• Professional certifications such as CISSP, OSCP, GWAPT, or similar are highly desirable.
• Strong technical depth in identity and access management, non-human identities, cloud security, configuration management, runtime security, data governance, and AI-related risk.

Responsibilities

• Serve as the lead authority for detection strategy across human and non-human identities, including service accounts, workloads, APIs, pipelines, and agentic systems.
• Define and drive a threat capability maturity model covering detection, response, identity security, data governance, privacy, third-party risk, and crisis readiness.
• Lead and mentor a Detection Engineer and partner with Privacy, Risk & Control Engineer to integrate threat, privacy, compliance, and audit activities.
• Remain hands-on in defining, validating, and tuning detections across identity, cloud, endpoint, network, application, and data layers.
• Own risk-based threat and vulnerability management, ensuring remediation priorities reflect exploitability, adversary relevance, identity exposure, and business context.

Skills

Threat modeling

Threat hunting

Adversarial techniques

Identity security

Cloud security

MITRE ATT&CK

Data governance

CI/CD security

Education

CISSP

OSCP

GWAPT

Job description

Tory Burch is seeking a senior security engineering leader to own enterprise threat management and risk-based detection. You will translate threat insights into governance decisions, drive MITRE ATT&CK-based detection across identity and cloud environments, and lead a team advancing detection maturity while integrating privacy and compliance considerations.

You will collaborate with executive leadership to ensure crisis readiness, incident response, and continuous improvement, shaping the