Senior Director, Adversary Services

Explore the possibilities across our global house of brands.
Defined by inclusivity rather than exclusivity, Tapestry embraces the exploration of individuality and invests in helping you grow personally and professionally. Every individual in our global house has the opportunity to make an impact, learn and be part of our growing and unique story.
At Tapestry, we have the freedom to express ourselves and run with our best ideas across Coach and Kate Spade New York. We share a profound belief in both our individual and collective potential, and know that with hard work and dedication, anything is possible.
Primary Purpose:
The Senior Director will be responsible for translating real-world adversary behavior into actionable security outcomes, enhancing detection capabilities, strengthening resilience, and enabling informed risk-based decision-making across the organization, with a particular focus on cloud environments. Through the integration of threat intelligence, adversary emulation, red teaming, and detection engineering, the Senior Director will proactively identify, simulate, and mitigate evolving cyber threats while advancing enterprise cybersecurity objectives.
The successful individual will leverage their proficiency in Cybersecurity to:
Adversary Services Strategy & Program Leadership
Define and execute the strategic vision, operating model, and roadmap for the Adversary Services function
Lead and oversee multiple specialized cybersecurity teams and capabilities, including Threat Intelligence, Adversary Emulation, Red Team Operations, Detection Validation, and Security Research
Set organizational priorities, allocate resources, and balance investments across the Adversary Services sub-function to drive strategic objectives, strengthen enterprise security outcomes, and support enterprise risk management and business priorities
Establish standards for engagement planning, execution, reporting, and measurement of program impact
Threat Intelligence & Actor Tracking
Lead ongoing tracking and analysis of relevant threat actors, including eCrime groups, ransomware operators, and targeted intrusion actors
Translate intelligence into actionable hypotheses aligned to organizational risk, including business initiatives and cloud environments
Maintain comprehensive adversary playbooks mapped to frameworks such as MITRE ATT&CK
Adversary Emulation & Red Team Operations
Design and execute high-fidelity adversary emulation campaigns grounded in real-world attacker tradecraft
Conduct red team engagements to assess the effectiveness of preventative, detective, and response controls across identity, endpoint, SaaS, and cloud platforms
Develop and scale reusable tooling, automation, and emulation capabilities
Detection Engineering & Security Partnerships
Partner closely with Detection Engineering and Blue Team functions to develop and refine behavior-based detections
Contribute to the development and tuning of analytics across cloud telemetry, including identity, control plane, and workload signals
Drive continuous validation cycles (emulate detect refine measure) through purple team exercises
Executive Engagement & Risk Advisory
Deliver clear, data-driven briefings to senior leadership on threat-driven risk and its impact on key business initiatives
Drive security outcomes that materially improve the organization's ability to manage cyber risk, protect critical business initiatives, strengthen operational resilience, and support enterprise growth objectives
Direct the resolution of highly complex and multifaceted cybersecurity challenges involving emerging threats, cloud security, identity security, detection effectiveness, and enterprise risk management
Provide prioritized recommendations on threats, attack paths, control gaps, and investment decisions
Represent Adversary Services in governance forums, incident response escalations, and strategic security initiatives
The accomplished individual will possess:
10+ years of experience across a combination of:
Threat Intelligence (including adversary tracking and TTP analysis)
Red Teaming, Adversary Emulation, or Purple Teaming
Offensive Security or Security Consulting
Proven ability to lead senior technical teams and influence cross-functional stakeholders, including executives
Strong understanding of attacker methodologies, including identity compromise, phishing, lateral movement, persistence, privilege escalation, and data exfiltration
Comprehensive understanding of cybersecurity program interdependencies across Technology, Infrastructure, Cloud Platforms, Digital, Data, and Enterprise Risk functions, with the ability to assess threats within a global business environment
An outstanding professional will have:
Offensive security certifications such as OSCP or OSCE.
Experience conducting security research withi