Tapestry Cybersecurity Analyst-2

Tapestry; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

Tapestry in Singapore is seeking a Cybersecurity Analyst who monitors alerts, investigates suspicious activity, and defends our systems across APAC.

You will split time: 50% responding to security events and 50% translating adversary insights into better detections, mitigations, and security controls, collaborating with global teams. This role sits at the intersection of Blue Team operations and Purple Team engineering, helping make the business harder to attack tomorrow.

Responsibilities

• Monitor and respond to security alerts from SIEM, EDR, email security, identity, cloud, and network platforms.
• Investigate suspicious activity, determine scope and impact, and drive incidents toward clear resolution.
• Perform event triage, evidence collection, timeline development, and root‑cause analysis.
• Partner with global security, IT, infrastructure, and business teams during security investigations.
• Tune alerts to improve signal quality and reduce noise.
• Document investigations, response actions, lessons learned, and recommended improvements.
• Support incident readiness activities, including playbooks, tabletop exercises, and response process improvements.
• Translate adversary behaviors, tactics, techniques, and procedures into actionable detection opportunities.
• Build, test, and improve detection logic across SIEM, EDR, identity, cloud, and other security tools.
• Map detections and mitigations to frameworks such as MITRE ATT&CK.
• Partner with red team, threat intelligence, vulnerability management, and security engineering teams to validate control effectiveness.
• Convert purple team findings into practical improvements: new alerts, better telemetry, hardened configurations, response playbooks, mitigation recommendations, or control enhancements.
• Support vulnerability assessment, remediation tracking, and security testing activities such as system assessments, code review support, or validation exercises.
• Measure detection quality, coverage, false‑positive rates, and response readiness.
• Help create repeatable test cases, adversary emulation scenarios, and operational documentation to continuously improve defenses.

Job description

Explore the possibilities across our global house of brands.

Defined by inclusivity rather than exclusivity, Tapestry embraces the exploration of individuality and invests in helping you grow personally and professionally. Every individual in our global house has the opportunity to make an impact, learn and be part of our growing and unique story.

At Tapestry, we have the freedom to express ourselves and run with our best ideas across Coach and Kate Spade New York. We share a profound belief in both our individual and collective potential, and know that with hard work and dedication, anything is possible.

Primary Purpose

We're looking for a Cybersecurity Analyst who likes chasing signals, investigating suspicious activity, and turning lessons from incidents into stronger defenses. You'll be part of the Cybersecurity team in APAC, reporting to the Director, Cybersecurity - APAC. You'll collaborate closely with global security operations, threat intelligence, security engineering, infrastructure, IT, and business teams. Based in Singapore, this role sits at the intersection of Blue Team operations and Purple Team engineering. You'll spend roughly 50% of your time responding to security events and supporting day-to-day defensive operations, and 50% translating adversary insights into better detections, mitigations, and measurable improvements across our security program. In short, you'll help defend the business today while making sure we're harder to attack tomorrow.

Blue Team: Respond, Investigate, Defend – 50%

• Monitor and respond to security alerts from SIEM, EDR, email security, identity, cloud, and network platforms.
• Investigate suspicious activity, determine scope and impact, and drive incidents toward clear resolution.
• Perform event triage, evidence collection, timeline development, and root‑cause analysis.
• Partner with global security, IT, infrastructure, and business teams during security investigations.
• Tune alerts to improve signal quality and reduce noise.
• Document investigations, response actions, lessons learned, and recommended improvements.
• Support incident readiness activities, including playbooks, tabletop exercises, and response process improvements.

Purple Team: Learn from the Adversary, Improve the Defense – 50%

• Translate adversary behaviors, tactics, techniques, and procedures into actionable detection opportunities.
• Build, test, and improve detection logic across SIEM, EDR, identity, cloud, and other security tools.
• Map detections and mitigations to frameworks such as MITRE ATT&CK.
• Partner with red team, threat intelligence, vulnerability management, and security engineering teams to validate control effectiveness.
• Convert purple team findings into practical improvements: new alerts, better telemetry, hardened configurations, response playbooks, mitigation recommendations, or control enhancements.
• Support vulnerability assessment, remediation tracking, and security testing activities such as system assessments, code review support, or validation exercises.
• Measure detection quality, coverage, false‑positive rates, and response readiness.
• Help create repeatable test cases, adversary emulation scenarios, and operational documentation to continuously improve defenses.

Tapestry is an equal opportunity and affirmative action employer and we pride ourselves on hiring and developing the best people. All employment decisions (including recruitment, hiring, promotion, compensation, transfer, training, discipline and termination) are based on the applicant's or employee's qualifications as they relate to the requirements of the position under consideration. These decisions are made without regard to age, sex, sexual orientation, gender identity, genetic characteristics, race, color, creed, religion, ethnicity, national origin, alienage, citizenship, disability, marital status, military status, pregnancy, or any other legally‑recognized protected basis prohibited by applicable law.