LuxExperience

LuxExperience operates a portfolio of high-profile digital luxury retail brands, including Mytheresa, NET-A-PORTER, MR PORTER, and YOOX. The group's platform handles the e-commerce, payments, and customer data for a global clientele purchasing high-value goods - a threat model that includes fraud, credential stuffing, and the protection of premium user data. Security teams here aren't guarding commodity traffic; they're defending a complex, multi-brand architecture where a breach has outsized reputational and financial consequences. The technical environment spans the infrastructure behind multiple distinct storefronts, each with its own technology stack and integration points. This presents a challenge in securing a heterogeneous estate at scale, from payment processing systems and customer authentication flows to the APIs connecting inventory, logistics, and personalization services. The Munich-based group was founded in 1987, with the Mytheresa brand launching online in 2006, giving it a long operational history in digital commerce. Working within this security function means contending with the specific attack surfaces of luxury e-commerce: bot-driven inventory scalping, account takeover attempts targeting high-net-worth individuals, and supply chain risks across a global vendor ecosystem. The role sits at the intersection of protecting critical business operations and enabling the seamless, high-touch digital experience the brands demand.