Senior Director, Adversary Services

Tapestry (Coach/Kate Spade); Lisboa; On-site; EUR 120,000 - 190,000; Full time

Job summary

Tapestry is seeking a Senior Director to translate real-world adversary behavior into actionable security outcomes, with a focus on cloud environments. You will lead Adversary Services, including Threat Intelligence, Adversary Emulation, Red Team Operations, and Detection Engineering, influencing risk-based decisions at the executive level.

You will drive strategy, oversee multiple teams, and partner across technology, security, and business units to strengthen enterprise resilience and risk

Qualifications

• 10+ years in threat intelligence, adversary emulation, red team or offensive security.
• Proven ability to lead senior technical teams and influence executives.
• Strong understanding of attacker methodologies and cloud security.

Responsibilities

• Define the strategic vision and roadmap for Adversary Services.
• Oversee Threat Intelligence, Adversary Emulation, Red Team, Detection Validation, and Security Research teams.
• Lead executive briefings on threat-driven risk and security outcomes.
• Drive engagement planning, measurement, and program impact across the function.
• Collaborate with Detection Engineering and Blue Team to refine detections in cloud environments.

Skills

Threat Intelligence

Adversary Emulation

Red Team Operations

Detection Engineering

Executive Engagement

Risk Advisory

Tools

MITRE ATT&CK

Python

Job description

Explore the possibilities across our global house of brands.

Defined by inclusivity rather than exclusivity, Tapestry embraces the exploration of individuality and invests in helping you grow personally and professionally. Every individual in our global house has the opportunity to make an impact, learn and be part of our growing and unique story.

At Tapestry, we have the freedom to express ourselves and run with our best ideas across Coach and Kate Spade New York. We share a profound belief in both our individual and collective potential, and know that with hard work and dedication, anything is possible.

Primary Purpose:

The Senior Director will be responsible for translating real-world adversary behavior into actionable security outcomes, enhancing detection capabilities, strengthening resilience, and enabling informed risk-based decision-making across the organization, with a particular focus on cloud environments. Through the integration of threat intelligence, adversary emulation, red teaming, and detection engineering, the Senior Director will proactively identify, simulate, and mitigate evolving cyber threats while advancing enterprise cybersecurity objectives.

The successful individual will leverage their proficiency in Cybersecurity to:

Adversary Services Strategy & Program Leadership

• Define and execute the strategic vision, operating model, and roadmap for the Adversary Services function
• Lead and oversee multiple specialized cybersecurity teams and capabilities, including Threat Intelligence, Adversary Emulation, Red Team Operations, Detection Validation, and Security Research
• Set organizational priorities, allocate resources, and balance investments across the Adversary Services sub-function to drive strategic objectives, strengthen enterprise security outcomes, and support enterprise risk management and business priorities
• Establish standards for engagement planning, execution, reporting, and measurement of program impact

Threat Intelligence & Actor Tracking

• Lead ongoing tracking and analysis of relevant threat actors, including eCrime groups, ransomware operators, and targeted intrusion actors
• Translate intelligence into actionable hypotheses aligned to organizational risk, including business initiatives and cloud environments
• Maintain comprehensive adversary playbooks mapped to frameworks such as MITRE ATT&CK

Adversary Emulation & Red Team Operations

• Design and execute high-fidelity adversary emulation campaigns grounded in real-world attacker tradecraft
• Conduct red team engagements to assess the effectiveness of preventative, detective, and response controls across identity, endpoint, SaaS, and cloud platforms
• Develop and scale reusable tooling, automation, and emulation capabilities

Detection Engineering & Security Partnerships

• Partner closely with Detection Engineering and Blue Team functions to develop and refine behavior-based detections
• Contribute to the development and tuning of analytics across cloud telemetry, including identity, control plane, and workload signals
• Drive continuous validation cycles (emulate to detect to refine to measure) through purple team exercises

Executive Engagement & Risk Advisory

• Deliver clear, data-driven briefings to senior leadership on threat-driven risk and its impact on key business initiatives
• Drive security outcomes that materially improve the organization's ability to manage cyber risk, protect critical business initiatives, strengthen operational resilience, and support enterprise growth objectives
• Direct the resolution of highly complex and multifaceted cybersecurity challenges involving emerging threats, cloud security, identity security, detection effectiveness, and enterprise risk management
• Provide prioritized recommendations on threats, attack paths, control gaps, and investment decisions
• Represent Adversary Services in governance forums, incident response escalations, and strategic security initiatives

The accomplished individual will possess:

• 10+ years of experience across a combination of: Threat Intelligence (including adversary tracking and TTP analysis)
• Red Teaming, Adversary Emulation, or Purple Teaming
• Offensive Security or Security Consulting
• Proven ability to lead senior technical teams and influence cross-functional stakeholders, including executives
• Strong understanding of attacker methodologies, including identity compromise, phishing, lateral movement, persistence, privilege escalation, and data exfiltration
• Comprehensive understanding of cybersecurity program interdependencies across Technology, Infrastructure, Cloud Platforms, Digital, Data, and Enterprise Risk functions, with the ability to assess threats within a global business environment

An outstanding professional will have:

• Offensive security certifications such as OSCP or OSCE.
• Experience conducting security research within cloud environments (AWS, Azure, GCP, and SaaS platforms)
• Programming proficiency (e.g., Python) for tooling, automation, or security analyt