Senior Threat Management & Detection Engineering Lead

Tory Burch; Jersey City (NJ); On-site; USD 165,000 - 200,000; Full time

Benefits offered by this job

Executive coaching

Employee discount

Paid volunteer days

Job summary

Tory Burch is seeking a technically authoritative cybersecurity leader to head the enterprise threat management function. You will own threat intelligence, threat modeling, detection engineering, adversarial validation, and risk-based vulnerability management while shaping cloud and identity security across the organization.

Role requires deep expertise in threat modeling, MITRE ATT&CK, and incident response, with hands-on leadership of a Detection Engineer and cross-functional collaboration

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience.
• 10+ years of progressive experience in threat engineering, threat management, incident response, detection engineering, threat intelligence, or related cybersecurity disciplines.
• Deep expertise in threat modeling, threat hunting, adversarial techniques, attack path analysis, and threat-informed defense.

Responsibilities

• Own and mature the enterprise threat management program, including threat intelligence, threat modeling, detection engineering, incident response, adversarial validation, and risk-based vulnerability management.
• Identify relevant adversaries, attack techniques, and attack paths and ensure they influence security priorities, architecture decisions, and operational activities.
• Apply frameworks such as MITRE ATT&CK pragmatically to improve prevention, detection, response, and resilience.
• Define and lead detection strategy across identities, endpoints, cloud platforms, networks, applications, data environments, and AI-enabled systems.
• Ensure identity telemetry, privilege use, token issuance, abnormal access patterns, workload behavior, and data access activities are first-class detection concerns.
• Remain hands-on in the design, tuning, validation, and continuous improvement of threat detections and hunting capabilities.
• Lead and mentor a Detection Engineer.
• Establish and maintain a threat intelligence capability that translates emerging threats into operational improvements.
• Lead threat modeling and attack path analysis across Microsoft 365, GCP, enterprise applications, ERP platforms, CI/CD pipelines, and data environments.
• Own and actively challenge red team, purple team, penetration testing, and adversarial simulation activities to ensure findings result in measurable improvements.
• Serve as the senior technical leader during cybersecurity incidents and direct technical response activities.
• Maintain relationships with MSSPs, legal counsel, communications teams, insurance providers, and executive leadership to ensure effective incident management.
• Design and facilitate consequence-driven tabletop exercises that test technical, operational, legal, and executive decision-making processes.
• Own vulnerability and exposure management strategies that prioritize remediation using exploitability, attack-path significance, identity exposure, business impact, and threat intelligence rather than severity scores alone.
• Ensure remediation efforts focus on vulnerabilities most likely to be exploited and cause meaningful business impact.
• Provide threat-informed guidance to architecture, cloud, infrastructure, application, and data teams.
• Assess AI-related risks, data protection concerns, and emerging technology threats.
• Partner with compliance and audit teams to ensure PCI, SOX, privacy, and regulatory controls effectively reduce cyber risk.
• Develop executive-level threat and risk reporting that communicates detection effectiveness, incident readiness, control maturity, vulnerability exposure, and residual risk.
• Define and drive a threat capability maturity model spanning detection, response, threat intelligence, identity security, vulnerability management, and crisis preparedness.

Skills

Threat modeling

Threat intelligence

Detection engineering

Incident response

Vulnerability management

Adversarial validation

Crisis readiness

Security architecture

Cloud security

AI-enabled security

Education

Bachelor's degree in Computer Science / Cybersecurity / Engineering

Tools

Microsoft 365

GCP

CI/CD pipelines

Job description

Tory Burch is seeking a technically authoritative cybersecurity leader to head the enterprise threat management function. You will own threat intelligence, threat modeling, detection engineering, adversarial validation, and risk-based vulnerability management while shaping cloud and identity security across the organization.

Role requires deep expertise in threat modeling, MITRE ATT&CK, and incident response, with hands-on leadership of a Detection Engineer and cross-functional collaboration